CVE ID :CVE-2026-92744 Published : Oct. 29, 2026, 11:17 p.m. | 43 minutes ago Description :Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem. Severity:…
CVE-2026-107239 – Veeam Management Pack for Microsoft System Center Remote Code Execution Vulnerability
CVE ID :CVE-2026-107239 Published : Oct. 29, 2026, 11:16 p.m. | 43 minutes ago Description :A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE)…
CVE-2026-107238 – Veeam Management Pack for Microsoft System Center Collector Remote Code Execution
CVE ID :CVE-2026-107238 Published : Oct. 29, 2026, 11:16 p.m. | 43 minutes ago Description :A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on…
CVE-2023-22793 – Veeam Management Pack for Microsoft System Center Remote Code Execution Vulnerability
CVE ID :CVE-2023-22793 Published : Oct. 29, 2026, 11:16 p.m. | 43 minutes ago Description :A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization…
CVE-2026-61719 – WeGIA: Stored Cross-Site Scripting (XSS) in “historico_prontuarios.php” via “textoProntuario” Field
CVE ID :CVE-2026-61719 Published : Oct. 29, 2026, 10:17 p.m. | 1 hour, 43 minutes ago Description :WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored cross-site scripting vulnerability in…
CVE-2026-85749 – MailWatch: IDOR lets any authenticated user release or delete another tenant’s quarantined mail
CVE ID :CVE-2026-85749 Published : Oct. 28, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, including…
CVE-2026-118579 – D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
CVE ID :CVE-2026-118579 Published : Oct. 28, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of…
CVE-2026-93851 – Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post
CVE ID :CVE-2026-93851 Published : Oct. 28, 2026, 10:17 p.m. | 2 hours, 7 minutes ago Description :Mattermost versions 11.9.x Severity: 8.0 | HIGH Visit the link for more details, such as CVSS details,…
CVE-2026-61572 – AVideo-Encoder: unauthenticated full-response server-side request forgery
CVE ID :CVE-2026-61572 Published : Oct. 28, 2026, 10:17 p.m. | 2 hours, 7 minutes ago Description :AVideo is a video-sharing Platform. Before the initial remediation attempt in 8.1.0, `url_get_contents` in `objects/functions.php` accepts caller-controlled…
CVE-2026-61567 – AVideo-Encoder: unauthenticated command execution through streamer login trust
CVE ID :CVE-2026-61567 Published : Oct. 28, 2026, 10:17 p.m. | 2 hours, 7 minutes ago Description :AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an attacker-named streamer in…