Lucene search
+L
PtsecurityRecent

212496 matches found

Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•29 views

PT-2026-86675

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

5CVSS5.6AI score0.0029EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86655

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme...

6.8CVSS5.8AI score0.00079EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86660

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

5.3CVSS4.8AI score0.00688EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86849

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage of a Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

4.7CVSS5.7AI score0.00109EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86842

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker...

6.5CVSS5.8AI score0.00324EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86649

When using the Direct XIP update strategy, the main application image starts other cores i.e. radio core, based on the currently active slot without additional verification. The MCUboot in the bare upstream configuration assumes that if there is at least a single slot for each image available, th...

7.5CVSS5.7AI score0.00109EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•14 views

PT-2026-88203

These are all security issues fixed in the python313-fastapi-0.138.0-2.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS7.2AI score0.0151EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86827

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

5.5CVSS5.7AI score0.00143EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86914

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream state never removes from the connection stream table. When a stream reaches the CLOSED state, stream state returns the concurrency slot and clears most of the stream's keys, but the entry itself...

7.5CVSS5.7AI score0.00365EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86816

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasl io start packet, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encrypted buffer count below the...

7.5CVSS6.5AI score0.00837EPSS
SaveExploits0References44
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•15 views

PT-2026-86619

A vulnerability was detected in sfturing hosp order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the function orderRecordsService.cancelOrder of the file ssm pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Cancellation. The manipulation of the argumen...

7.5CVSS5.3AI score0.00565EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•22 views

PT-2026-86736

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

7.7CVSS7.2AI score0.00547EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86635

A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1 20251110. This vulnerability affects the...

9.9CVSS8AI score0.03152EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•13 views

PT-2026-86877

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...

3.3CVSS5.7AI score0.00153EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86800

league/commonmark versions = 2.0.0 and 2.8.4 patched in 2.9.0 contain a denial of service vulnerability in UniqueSlugNormalizer::normalize, which restarts its numeric-suffix search from 1 on every slug collision, resulting in OK^2 time complexity for K headings that collapse to the same base slug...

8.7CVSS5.6AI score0.00509EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86618

A security vulnerability has been detected in sfturing hosp order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects the function updateOrderSta1/updateOrderdiseaseInfo of the file ssm pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Handler. The manipulatio...

7.5CVSS5.2AI score0.00565EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•22 views

PT-2026-86629

A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /Report/Upload/UploadFormImg.ashx. Executing a manipulation of the argument File can lead to unrestricted upload. It is possible to launch...

7.5CVSS5.5AI score0.00513EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86867

In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...

6.5CVSS5.7AI score0.0033EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86871

In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission...

4.3CVSS5.8AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•12 views

PT-2026-88197

These are all security issues fixed in the kbfs-6.6.3-4.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86615

A security flaw has been discovered in sfturing hosp order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function modifyPassWord of the file ssm pro/src/main/java/cn/sfturing/web/CommonUserController.java of the component Password Recovery. Performing a manipulation...

6.9CVSS6AI score0.00595EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•16 views

PT-2026-86617

🚨 HIGH Severity: CVE-2026-86313 CVSS 7.8 Out-of-bounds write flaw in Samsung Opensource Walrus enables buffer overflow attacks. Local exploit, no privileges required. Affected: Walrus commit af80e665ea CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/6XjdaUNUYK...

7.8CVSS5.9AI score0.0017EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•13 views

PT-2026-86590

An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet...

9.3CVSS8.4AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•13 views

PT-2026-86624

A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file User Login.php. The manipulation of the argument email results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

7.5CVSS5.7AI score0.00431EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86775

PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients. Attackers can send negative or out-of-range damage values in itemstack NBT to trigger unhandled exceptions in the Durable class, causing server crashes...

7.1CVSS5.6AI score0.00508EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86754

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...

9.4CVSS6.2AI score0.00847EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•16 views

PT-2026-86609

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244...

5.8AI score0.00108EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•16 views

PT-2026-86598

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196...

8.4CVSS5.9AI score0.00128EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•15 views

PT-2026-86605

In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894...

5.8AI score0.00122EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86653

A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument...

6.9CVSS5.4AI score0.0055EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•15 views

PT-2026-86648

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src/main/java/com/controller/CommonController.java of the component CommonDao. Executing a manipulation of the argument...

7.5CVSS6.8AI score0.00445EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•15 views

PT-2026-86639

The Windows Interactive Service in OpenVPN 2.7 alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

5.6CVSS5.8AI score0.00171EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•23 views

PT-2026-86640

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7 alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs...

5.9CVSS6.2AI score0.00116EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86582

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/pro transac.php?action=add. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclos...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86870

In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission...

7.7CVSS5.7AI score0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86614

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup transac.php. Performing a manipulation of the argument companyname results in sql injection. It is possible to initiate the attack remotel...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•13 views

PT-2026-86680

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages...

6.8CVSS6AI score0.00142EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•12 views

PT-2026-86597

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197...

8.4CVSS6.3AI score0.0013EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86758

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...

8.1CVSS5.8AI score0.0068EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•13 views

PT-2026-86613

In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10867524 / ALPS10876355; Issue ID:...

5.8AI score0.0012EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•13 views

PT-2026-86601

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9126...

5.9AI score0.00114EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•21 views

PT-2026-86794

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming...

8.7CVSS5.8AI score0.00493EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86857

In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks...

3.3CVSS5.7AI score0.00158EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•12 views

PT-2026-93249

It was discovered that polkit incorrectly handled cookie input. A local attacker could possibly use this issue to cause polkit to crash, resulting in a denial of service, or execute arbitrary code...

6.4AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•14 views

PT-2026-86632

A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the...

6.9CVSS5.7AI score0.00484EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•16 views

PT-2026-86657

🛡️ OpenVPN Fixes 7 Security Flaws Affecting VPN Connections and Windows Systems Details: https://t.co/KwH7qZk5hI The OpenVPN project has shipped version 2.7.7, a security-focused release that patches seven distinct vulnerabilities spanning the software’s core reliability layer and its...

8.7CVSS6AI score0.00544EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•16 views

PT-2026-86654

A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service CGMS Record Access Control Point RACP write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memory. The exploitable impact cannot be predetermined - it is entirely dependent on...

8.7CVSS6AI score0.00155EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86801

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions. Attackers can craft documents with duplicate footnote definitions and references to create quadratic output expansion, consuming excessiv...

8.7CVSS5.6AI score0.00488EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86770

Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stored configuration controlled by a user. The previous renderer considered a URL safe if it appeared relative or if its parsed hostname matched the configured MIS...

5.1CVSS5.8AI score0.00237EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86767

Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates. The query always fetched User.email, while redaction happened only inside the non-REST rendering branch. As a result, the same authenticated user who saw redacted data in the normal...

5.3CVSS5.5AI score0.0027EPSS
SaveExploits0References2
Total number of security vulnerabilities212496