Lucene search
+L
PtsecurityRecent

212496 matches found

Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•9 views

PT-2026-89100

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

3CVSS5.8AI score0.00328EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•13 views

PT-2026-88879

The Hustle WordPress plugin before 7.8.14.2 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into the message it returns after submission, because the guard it applies can be defeated by nesting, allowing unauthenticated users to run any...

4.8CVSS5.8AI score0.00243EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•16 views

PT-2026-89129

A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

7.2CVSS6.4AI score0.00841EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•12 views

PT-2026-89053

zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MIN VALUE to read unmapped memory, causing JVM...

8.8CVSS5.9AI score0.00432EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•10 views

PT-2026-89192

Summary A Cross-Site Scripting XSS vulnerability in external service creation allows an authenticated attacker to inject HTML/script payloads into external service names, which may execute in a user's browser when rendered by administrative web interfaces. Details Prior to v2.4.0, external servic...

3.7CVSS6.1AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•13 views

PT-2026-89153

A SQL Injection vulnerability in Siam Ordering siam-server 1.0.0 allows remote authenticated attackers to execute arbitrary SQL commands via the $ string concatenation in AdminMapper.java and multiple other Mapper files including MerchantWithdrawRecordMapper.java and MemberWithdrawRecordMapper.ja...

6.5AI score0.00513EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•14 views

PT-2026-88998

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure...

7.5CVSS5.9AI score0.00406EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•13 views

PT-2026-88862

The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the secret that gates access to any order and, through it, that...

5.7AI score0.00345EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•12 views

PT-2026-88941

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access...

7.3CVSS5.8AI score0.00332EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•13 views

PT-2026-89079

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

9CVSS5.7AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•15 views

PT-2026-88902

CVE-2026-79696: A Perfect 10.0 in Google's Agent Toolkit Google just shipped a fix for a vulnerability that scored a perfect 10.0 on the CVSS scale — the maximum severity a flaw can get. The bug lives in ADK, Google Cloud's Agent Development Kit for Python — the framework a growing number of team...

10CVSS6.6AI score0.0074EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•13 views

PT-2026-88796

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability...

7.3CVSS5.7AI score0.0012EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•14 views

PT-2026-89714

These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...

8.8CVSS5.7AI score0.00682EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•14 views

PT-2026-89006

PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients. Attackers can exploit a race condition by attacking a disconnecting player to trigger multiple death handlers, causing inventory items and experience to drop multiple times for...

6.3CVSS5.6AI score0.00348EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•12 views

PT-2026-89167

Summary On SQLite deployments, the lookup that maps an external identity to a local account does a substring match instead of an exact match. A subject value containing SQL wildcard characters therefore matches accounts the value was never issued for, and the sign-in binds to whichever account th...

8.1CVSS5.7AI score0.00599EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•12 views

PT-2026-89172

Summary Any authenticated user with access to a shared terminal server could get script of their choosing to run in the Open WebUI origin itself. The in-app port preview rendered the content of a previewed port in an iframe whose sandbox always granted allow-same-origin alongside allow-scripts, a...

8.7CVSS6AI score0.00417EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•13 views

PT-2026-89161

Summary A user who is demoted from admin by an identity provider keeps admin-level read and write access to every user's notes, over any Socket.IO connection that was already open when the demotion happened. Open WebUI caches the user's role on the socket at connection time, and the two SSO...

6.5CVSS5.5AI score0.00513EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•15 views

PT-2026-89179

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

6.5CVSS6.4AI score0.00583EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•13 views

PT-2026-89173

Summary With the Playwright web loader enabled, Open WebUI checks the address behind a user-submitted URL before allowing the request, then handed the request to the browser to perform. The browser resolved the hostname a second time, on its own, and that answer was never checked. An attacker who...

7.7CVSS5.7AI score0.00354EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•14 views

PT-2026-88872

The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL query, allowing high privilege users such as administrators to perform SQL injection attacks...

5.8AI score0.00311EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•12 views

PT-2026-88923

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the ai generate text function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

5.9AI score0.00576EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•10 views

PT-2026-89056

zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing the JVM...

7.7CVSS7.2AI score0.00201EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•16 views

PT-2026-89058

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially explo...

5.3CVSS5.9AI score0.04725EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•11 views

PT-2026-89085

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested it and that doesn't work at all, only a black screen with pipe fault errors were observed. On systems with media GT, extra latency is added...

5.8AI score0.00209EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•11 views

PT-2026-88864

The SupportCandy WordPress plugin before 3.5.3 does not perform an authorization check on one of its support-ticket attachment download paths, allowing unauthenticated attackers to read protected customer-uploaded attachments by enumerating sequential attachment identifiers...

5.8AI score0.00345EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•13 views

PT-2026-89177

Summary Chat histories are stored as an unvalidated JSON object. After a message is deleted, the code that picks the chat's new current message walked down the childrenIds links without recording where it had already been. Any account with the default user role could store a chat whose messages...

6.5CVSS5.5AI score0.00592EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•8 views

PT-2026-89168

Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...

4.3CVSS5.8AI score0.00372EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•8 views

PT-2026-89080

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS5.7AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•13 views

PT-2026-88833

Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information...

5.1CVSS5.7AI score0.00093EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•18 views

PT-2026-89103

Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to denial of service and information tampering...

5.4CVSS5.8AI score0.0039EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•12 views

PT-2026-88908

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this...

3.3CVSS5.7AI score0.00136EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•12 views

PT-2026-89044

knowns npm package versions = 0.29.1 contain a path traversal vulnerability in the Document API. The HTTP handler in internal/server/routes/docs.go normalizes the user-supplied document path with cleanDocPath, which strips leading/trailing slashes and the .md suffix but does not neutralize ../...

8.8CVSS6.3AI score0.00747EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•22 views

PT-2026-88764

Tanium addressed a path traversal vulnerability in Tanium Data Service...

6.6CVSS5.7AI score0.0031EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•43 views

PT-2026-89045

News: Schneider Electric, Siemens, and Aveva ship ICS Patch Tuesday. Worst new hit: Modicon M580 auth CVE-2026-3869 CVSS 9.2. Siemens flags critical Reyrolle 7SR5, OIS, Industrial Edge bugs. OT owners: patch controllers now. https://t.co/TT7I5NW8Ee...

9.2CVSS5.7AI score0.00543EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•13 views

PT-2026-88865

The SupportCandy WordPress plugin before 3.5.3 does not validate a submitted per-ticket authorization code before disclosing the real code to the requester, allowing unauthenticated users to read the contents of any support ticket...

5.7AI score0.00345EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•15 views

PT-2026-88977

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o...

5.6CVSS5.8AI score0.00231EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•15 views

PT-2026-88871

The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticated attackers to extract arbitrary data from the database via SQL injection...

5.9AI score0.00445EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•17 views

PT-2026-88813

An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service...

7.5CVSS5.7AI score0.00507EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•17 views

PT-2026-88857

The ELEX WooCommerce Request a Quote WordPress plugin before 2.4.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks and extract arbitrary data from the database...

5.9AI score0.00397EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•11 views

PT-2026-88882

The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...

6.9CVSS6AI score0.00611EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•16 views

PT-2026-88887

The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to time-based SQL Injection via the 'feed' parameter in all versions up to, and including, 2.23.7 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS5.7AI score0.00261EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•15 views

PT-2026-89211

Unauthenticated Network-Exposed Turborepo Task Execution via /api/run Summary @yeger/turbo-graph starts its embedded Next.js server without binding to the loopback interface, causing it to listen on all network interfaces 0.0.0.0:29312 by default. The /api/run HTTP endpoint exposed by this server...

8.8CVSS6.4AI score0.00487EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•10 views

PT-2026-88919

Missing Authorization, Improper Control of Generation of Code 'Code Injection', Improper Control of Dynamically-Managed Code Resources, Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache...

5.7AI score0.00665EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•30 views

PT-2026-88906

Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the authenticate method — registered on the rest authentication errors filter and therefore evaluated for every unauthenticated REST API...

8.8CVSS5.8AI score0.0291EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•16 views

PT-2026-88793

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

8.6CVSS5.7AI score0.00449EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•10 views

PT-2026-88931

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...

7.5CVSS5.8AI score0.01127EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•12 views

PT-2026-88855

The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester is authorized to modify the targeted booking on one branch of its bank-deposit handler, allowing an unauthenticated attacker who knows the target customer's email address to reset that customer's booking...

5.8AI score0.00192EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•12 views

PT-2026-88761

The WP Event Solution Eventin plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the create item handler for the /wp-json/eventin/v2/orders REST endpoint. The endpoint's create item permissions check function only verifies a wp rest nonce whic...

5.3CVSS5.6AI score0.00238EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•14 views

PT-2026-88843

Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...

2.1CVSS5.7AI score0.00105EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•15 views

PT-2026-89020

Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated users to read arbitrary server files and issue server-side HTTP requests. Attackers can submit markdown image syntax in checkout acceptance notes that survive HTML escaping, are expanded ...

8.5CVSS5.8AI score0.0037EPSS
SaveExploits1References6
Total number of security vulnerabilities212496