CVE ID :CVE-2026-28701 Published : June 26, 2026, 10:40 p.m. | 2 hours, 31 minutes ago Description :Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended…
CVE-2026-9222 – Setracker2 Children’s Smartwatch Ecosystem Use of password hash instead of password for authentication
CVE ID :CVE-2026-9222 Published : June 25, 2026, 11:29 p.m. | 1 hour, 42 minutes ago Description :Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with…
CVE-2026-9221 – Setracker2 Children’s Smartwatch Ecosystem Use of a Broken or Risky Cryptographic Algorithm
CVE ID :CVE-2026-9221 Published : June 25, 2026, 11:27 p.m. | 1 hour, 43 minutes ago Description :The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5 to generate a request signature…
CVE-2026-9220 – Setracker2 Children’s Smartwatch Ecosystem Use of hard-coded cryptographic key
CVE ID :CVE-2026-9220 Published : June 25, 2026, 11:13 p.m. | 1 hour, 57 minutes ago Description :Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests between the watch and its backend…
CVE-2026-9219 – Setracker2 Children’s Smartwatch Ecosystem Generation of Predictable Numbers or Identifiers
CVE ID :CVE-2026-9219 Published : June 25, 2026, 11:10 p.m. | 2 hours, 1 minute ago Description :Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior have a predictable registration ID derived from IMEI….
CVE-2026-22879 – VTK vtk-dicom heap-based buffer overflow
CVE ID :CVE-2026-22879 Published : June 25, 2026, 9:46 p.m. | 3 hours, 25 minutes ago Description :vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability Severity: 8.1 | HIGH Visit the link for more details,…
CVE-2026-9155 – OS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.
CVE ID :CVE-2026-9155 Published : June 25, 2026, 12:25 a.m. | 45 minutes ago Description :OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS…
CVE-2026-7569 – Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability
CVE ID :CVE-2026-7569 Published : June 24, 2026, 11:15 p.m. | 1 hour, 55 minutes ago Description :Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication…
CVE-2026-9787 – Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability
CVE ID :CVE-2026-9787 Published : June 24, 2026, 11:15 p.m. | 1 hour, 55 minutes ago Description :Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
CVE-2026-9786 – Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability
CVE ID :CVE-2026-9786 Published : June 24, 2026, 11:15 p.m. | 1 hour, 55 minutes ago Description :Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…