Aggregator

A vulnerability, which was classified as critical, has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected is an unknown function of the file dashboard_page/admin_page.php of the component Admin Interface. The manipulation of the argument UserAuthData leads to improper authorization. This vulnerability is listed as CVE-2026-11336. The attack may be initiated remotely. In addition, an exploit is available. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability identified as problematic has been detected in Ericsson Packet Core Gateway up to 1.29. Affected is an unknown function. Performing a manipulation results in improper handling of syntactically invalid structure. This vulnerability is known as CVE-2026-25657. Access to the local network is required for this attack. No exploit is available. You should upgrade the affected component.

A vulnerability labeled as problematic has been found in Ericsson Packet Core Gateway up to 1.29. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to improper handling of missing values. This vulnerability is handled as CVE-2026-25658. The attack can only be done within the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in Ericsson Packet Core Gateway up to 1.29. Affected by this issue is some unknown functionality. The manipulation leads to improper handling of missing values. This vulnerability is uniquely identified as CVE-2026-25659. The attack can only be initiated within the local network. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in Samsung Assistant up to up to 9.3.13. This vulnerability affects unknown code of the component Android Application. The manipulation results in improper export of android application components. This vulnerability is known as CVE-2026-21032. Attacking locally is a requirement. No exploit is available. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in Samsung Assistant up to up to 9.3.13. This issue affects some unknown processing of the component Android Application. This manipulation causes improper export of android application components. This vulnerability is handled as CVE-2026-21033. It is possible to launch the attack on the local host. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in damasac thaipalliative_lte up to 3.0. It has been classified as problematic. Affected by this issue is some unknown functionality of the file /substudy/ezform.php of the component HTML Attribute Handler. Performing a manipulation of the argument idFormMain results in HTML injection. This vulnerability is cataloged as CVE-2026-38579. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability categorized as critical has been discovered in BINARY DataDog::DogStatsd up to 0.07 on Perl. The impacted element is the function format_event. Such manipulation leads to crlf injection. This vulnerability is documented as CVE-2026-11362. The attack can be executed remotely. There is not any exploit available.

A vulnerability classified as critical has been found in HMBRAND DBI up to 1.647 on Perl. This impacts the function preparse of the component Placeholder Handler. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2026-10879. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in ShapedPlugin Product Slider Pro for WooCommerce Plugin up to 3.5.2 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper validation of specified quantity in input. This vulnerability is referenced as CVE-2026-49777. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all.

实力入选安在AI安全产业图谱，智能情报赋能新一代数字供应链安全治理！

对于经常使用 AI Agent 的用户来说，Hermes Agent 应该并不陌生。凭借强大的自动化能力和灵活的扩展性，它已经成为不少开发者和 AI 爱好者的重要工具

Let no one accuse Bernie Sanders of ducking the big questions. Writing in the New York Tim

A vulnerability categorized as critical has been discovered in Oracle Java SE 25.0.1. This affects an unknown part of the component Libraries. Such manipulation leads to improper authorization. This vulnerability is documented as CVE-2026-22008. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition and classified as critical. The affected element is an unknown function of the component JAXP. Such manipulation leads to improper authorization. This vulnerability is listed as CVE-2026-22016. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability was found in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. It has been declared as critical. This affects an unknown function of the component JGSS. Executing a manipulation can lead to improper authorization. This vulnerability is registered as CVE-2026-22013. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. Affected is an unknown function of the component Security. The manipulation results in improper authorization. This vulnerability is reported as CVE-2026-22007. The attack requires a local approach. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability labeled as problematic has been found in Oracle Java SE and GraalVM Enterprise Edition. Affected by this issue is some unknown functionality of the component Hotspot. Such manipulation leads to denial of service. This vulnerability is traded as CVE-2026-22003. An attack has to be approached locally. There is no exploit available. The affected component should be upgraded.

A vulnerability has been found in MIT Kerberos 5 and classified as problematic. Affected by this vulnerability is the function berval2tl_data in the library plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. Performing a manipulation results in integer underflow. This vulnerability is cataloged as CVE-2026-11850. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.