2026

Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers

Cain & Abel 4.9.56 contains an unquoted service path vulnerability that allows local attackers to potentially execute ar

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attack

TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable fi

Emerson PAC Machine Edition 9.80 contains an unquoted service path vulnerability in the TrapiServer service that allows

Connectify Hotspot 2018 contains an unquoted service path vulnerability in its ConnectifyService executable that allows

BlueSoleilCS 5.4.277 contains an unquoted service path vulnerability in its Windows service configuration that allows lo

Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo p

WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnerability that allows attackers to manipula

Prowise Reflect version 1.0.9 contains a remote keystroke injection vulnerability that allows attackers to send keyboard

Private Internet Access 3.3 contains an unquoted service path vulnerability that allows local users to potentially execu

Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with

Audio Conversion Wizard v2.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code b

WOW21 5.0.1.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitra

Sandboxie-Plus 5.50.2 contains an unquoted service path vulnerability in the SbieSvc Windows service that allows local a

Tdarr 2.00.15 contains an unauthenticated remote code execution vulnerability in its Help terminal that allows attackers

VIVE Runtime Service 1.0.0.4 contains an unquoted service path vulnerability that allows local users to execute arbitrar

ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows loca

e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrators to override server

PTPublisher 2.3.4 contains an unquoted service path vulnerability in the PTProtect service that allows local attackers t

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. A

ITeC ITeCProteccioAppServer contains an unquoted service path vulnerability that allows local attackers to execute code

ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload p

Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows atta

Algo 8028 Control Panel version 3.3.3 contains a command injection vulnerability in the fm-data.lua endpoint that allows

Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts thr

e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrative users to bypass upl

e107 CMS 3.2.1 contains an upload restriction bypass vulnerability that allows authenticated administrators to upload ma

e107 CMS version 3.2.1 contains multiple vulnerabilities that allow cross-site scripting (XSS) attacks. The first vulner

Wondershare UBackit 2.0.5 contains an unquoted service path vulnerability that allows local users to potentially execute

Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local

Wondershare FamiSafe 1.0 contains an unquoted service path vulnerability in the FSService that allows local users to pot

Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows local users

Wondershare Dr.Fone 12.0.18 contains an unquoted service path vulnerability that allows local users to execute arbitrary

Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to re

NanoCMS 0.4 contains an authenticated file upload vulnerability that allows remote code execution through unvalidated pa

mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulat

Testa 3.5.1 contains a reflected cross-site scripting vulnerability in the login.php redirect parameter that allows atta

Aero CMS 0.0.1 contains a SQL injection vulnerability in the author parameter that allows attackers to manipulate databa

VIAVIWEB Wallpaper Admin 1.0 contains an SQL injection vulnerability that allows authenticated attackers to manipulate d

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functio

VIAVIWEB Wallpaper Admin 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by ma

Owlfiles File Manager 12.0.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious scr

Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers t

CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attacke

4images 1.9 contains a remote command execution vulnerability that allows authenticated administrators to inject reverse

Senayan Library Management System 9.0.0 contains a SQL injection vulnerability in the 'class' parameter that allows atta

Splashtop 8.71.12001.0 contains an unquoted service path vulnerability in the Splashtop Software Updater Service that al

CuteEditor for PHP (now referred to as Rich Text Editor) 6.6 contains a directory traversal vulnerability in the browse

YouPHPTube <= 7.8 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts throug