Recent CVEs

Local privilege escalation due to DLL hijacking vulnerability

Local privilege escalation due to excessive permissions assigned to child processes

Local privilege escalation due to DLL hijacking vulnerability

Local privilege escalation due to EXE hijacking vulnerability

Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and File/Set components that lack the allowed_classes restriction.

OP-TEE has a Use-After-Free race in FF-A shared-memory teardown

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected devi

GLPI has stored XSS in asset locks

GLPI Vulnerable to Arbitrary Item Deletion via Planning Endpoint

GLPI vulnerable to arbitrary files deletion by technician

GLPI vulnerable to unauthorized reading of a specific asset object

Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers

Stack buffer overflow in method gdv-serverconfig

Stack buffer overflow in method dali-devconfig

Stack buffer overflow in method bac-deviceobject

Local file inclusion vulnerability and deletion in ugw-logread method

Arbitrary process termination vulnerability in method ugw-logstop

Arbitrary file delete vulnerability in method ugw-restoreinfo

Arbitrary file delete vulnerability in method ugw-restore

Arbitrary file delete vulnerability in method ugw-logstop

Arbitrary file delete vulnerability in method ugw-delete-file

Arbitrary file delete vulnerability in method bac-scanresult

Hardcoded default Password for Service Account

Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers

Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232

Environment Variable Resolution Vulnerability in mlflow/mlflow

ipmi-oem in FreeIPMI before 1

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws

Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled

An OS command injection vulnerability in the app

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP (192

RockRMS v16

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-force attacks via the TDDP password change endpoint (code=10), which lacks the rate limiting applied to the login endpoint (code=7)

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port 1900, exposing internal memory to unauthenticated adjacent network attackers

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key using single DES in ECB mode

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP

An integer underflow in the BGPUpdate

GLPI Vulnerable to Stored XSS in ITIL Costs

alf.io has an Authenticated RCE via Extension Script Sandbox Escape

LibreChat Exfiltrates Server Secrets via MCP Server URL Injection

LibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keys

QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php

Quadratic complexity in WordDecoder.DecodeHeader in mime

Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM

BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler

authentik: SourceStage bypass via empty POST

BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler

authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are changeable through the API

authentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user

authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover