2026

The debugging routine SCREEN_CLICK(5053) enables a connection to skip the standard device login prompt entirely and dire

Overly permissive configuration settings on cloud storage containers expose active telemetry information publicly to the

The summary service endpoint suffers from an IDOR vulnerability where it fails to verify user ownership of hardware seri

The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose

The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unau

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_Pars

Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke

The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for u

The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse.

A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient ba

The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe usin

The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction

OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted IS

OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Iron

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints tha

ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "

HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::E

CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpReq

A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth heade

Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities

PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz")

OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing unauthenticated remote a

The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'columns' parameter in

An out-of-bounds read vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versio

The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric names are not checked fo

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the co

A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08. Af

A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_h

OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info o

Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low p

Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with l

A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock D

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock D

Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock D

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Redirect module doe

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system v

Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via t

A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reacha

libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory al

A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_datafr

Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) an

Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as J

Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES

Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scri

Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated

Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These key

Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules