Heap Buffer Overflow Discovered in PJPROJECT 2.16 (CVE-2026-25994)
A heap buffer overflow vulnerability has been disclosed in PJPROJECT version 2.16, affecting the PJNATH ICE session component of the…
Security
Cybersecurity, vulnerabilities, threats, and defense
ePati Antikor NGFW Authentication Bypass Exposes Firewall to Unauthorized Access
A vulnerability in the ePati Antikor Next-Generation Firewall allows attackers to bypass authentication entirely and access sensitive system data through…
Apache HertzBeat 1.8.0 Allows Remote Code Execution via Monitoring Templates
Apache HertzBeat, an open-source real-time monitoring system, has a critical vulnerability in version 1.8.0 that allows authenticated users to execute…
WordPress Supsystic Contact Form Plugin Affected by SSTI Vulnerability
A server-side template injection (SSTI) vulnerability has been identified in the Supsystic Contact Form plugin for WordPress, affecting versions up…
Remote Sunrise Helper 2026.14: Unauthenticated Remote Code Execution
The same Remote Sunrise Helper software that leaks file listings has a bigger problem: unauthenticated remote code execution. Version 2026.14…
Remote Sunrise Helper 2026.14: Unauthenticated File Listing Flaw
Remote Sunrise Helper for Windows version 2026.14 contains a vulnerability that allows unauthenticated users to list files and directories on…
CVE-2026-33829: Windows Snipping Tool NTLMv2 Hash Hijack Vulnerability
A vulnerability tracked as CVE-2026-33829 allows attackers to force Windows Snipping Tool into sending a user’s NTLMv2 hash to a…
FUXA SCADA Platform Hit by Pre-Auth Remote Code Execution Bug
A critical unauthenticated remote code execution vulnerability in the FUXA SCADA platform could let attackers take full control of affected…
SolarEdge Monitoring Platform Vulnerable to CSRF and Out-of-Band Injection
The SolarEdge Monitoring Platform contains a cross-site request forgery vulnerability that could let an attacker hijack operator sessions and potentially…
Lenovo LegionSpace Flaw Lets Local Users Hijack Service Path
An unquoted service path vulnerability in Lenovo LegionSpace version 1.7.11.2 could allow a local attacker to escalate privileges on affected…