The Android application "Ticket Ryutsu Center" by Wavedash Co., Ltd. contains multiple unspecified vulnerabilities. No detailed technical information, affected versions, or exploit data are provided.
A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors. The attack can be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Cusimanse is a declarative, composable YAML framework designed to facilitate agent-operated security research on disposable compute environments. It enables researchers to declare contracts, requirements, capabilities, and policies to create reproducible research workflows. The project is in beta and actively developed, emphasizing responsible AI-assisted development and secure execution boundaries. It is not a vulnerability or exploit but a security research tool framework.
CVE-2026-105571 is a medium severity vulnerability in PickMall Lilishop up to version 4.2.4. It involves improper authorization in the Mobile Binding component, specifically in the /buyer/passport/member/bindMobile function. The flaw allows remote attackers to manipulate the Username argument to bypass authorization controls. Exploit code has been published, but there is no indication of active exploitation in the wild. The vendor has not yet responded or issued a fix.
A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_discovery of the file web/reNgine/tasks.py of the component listTargets Endpoint. The manipulation of the argument Name results in os command injection. The attack can be launched remotely. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.
A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 8.0-d0 mitigates this issue. The patch is named bb5fde228f4ca5bd26d96368b61f6e0c21df51df. The affected component should be upgraded.
Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_serve_one.
On HTTP/2 and HTTP/3 a WebSocket handshake arrives as an Extended CONNECT, which is matched as a GET and so reaches every GET route, API operation and mount. The Origin check runs only when a websocket route matches. On this transport the handler's status is the handshake response, and a 2xx accepts it.
A cross-origin page can open a WebSocket to any path and learn from its open or error event whether that path returns 2xx.
CVE-2026-104044 is a vulnerability in the sssd component of Red Hat Enterprise Linux 10. A local attacker can cause a Denial of Service (DoS) by sending a specially crafted PAM request when passkey authentication is enabled. The issue arises from a missing state validation check in passkey Kerberos handling, leading to a NULL pointer dereference and crash of the PAM responder, disrupting authentication services on the host.
A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the responder process and resulting in a Denial of Service (DoS).
CVE-2026-104042 is a vulnerability in the sssd component of Red Hat Enterprise Linux 10. A local attacker can trigger a denial of service by sending a crafted PAM request with a zero-length authentication token, causing an out-of-bounds read and crashing the PAM responder. This flaw results from missing input validation when processing the token.
CVE-2026-104041 is a medium severity vulnerability in Red Hat Enterprise Linux 10's SSSD component. An unprivileged local user can cause the Name Service Switch (NSS) responder's negative cache to grow without bound by repeatedly requesting lookups for nonexistent entries. This unchecked cache growth can lead to memory exhaustion, causing a denial of service as the responder becomes unresponsive or terminates.
A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included in Microsoft Graph Open Data Protocol (OData) queries. A low-privileged local user can exploit this flaw by submitting a crafted search request, altering query filters to broaden user or group searches. This can lead to information disclosure by retrieving unintended directory objects, as well as a Denial of Service (DoS) through excessive processing and cache population.
CVE-2026-104039 is a medium severity vulnerability in Red Hat Enterprise Linux 10's SSSD component. It involves an expired pointer dereference during GSSAPI authentication in the PAM responder, which can cause a denial of service by crashing system authentication services when a local user sends an additional request over the same connection.
A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument file_name leads to os command injection. The attack may be performed from remote.
CVE-2026-82989 is a critical input injection vulnerability in the vCast network services of ViewSonic ViewBoard devices. It allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via HTTP requests to unauthenticated network endpoints. This can lead to full compromise of confidentiality, integrity, and availability of the affected system.
CVE-2026-105472 is a medium severity SQL injection vulnerability in the girishsaraf Online-Appointment-Booking-System affecting the book.php file's Booking Handler component. The vulnerability arises from improper handling of the Doctor/appointment argument, allowing remote attackers to execute SQL injection attacks. The product uses a rolling release strategy, so specific affected versions are not identified. The issue was reported early to the project, but no response or patch has been provided yet. Public exploit code is available, increasing the risk of exploitation.
CVE-2026-104038 is a medium severity vulnerability in sssd on Red Hat Enterprise Linux 10. It allows a remote attacker to cause a denial of service by submitting a certificate missing an expected Security Identifier (SID) extension. When SID-based certificate mapping rules are configured, the service does not verify the extension's presence before processing, leading to a NULL pointer dereference and process crash during authentication or lookup.
CVE-2026-104037 is a vulnerability in the System Security Services Daemon (SSSD) component of Red Hat Enterprise Linux 10. A local attacker can send a specially crafted request with an invalid packet length to the autofs responder UNIX socket, triggering an integer underflow and causing an out-of-bounds memory read. This results in the responder process crashing and a denial of service (DoS) condition. The vulnerability has a CVSS 3.1 score of 5.5 (medium severity).
CVE-2026-92821 is a vulnerability in SSSD on Red Hat Enterprise Linux 10 where password expiration warnings are evaluated before restrictive LDAP access rules. This causes an expired-password warning to terminate rule evaluation early and incorrectly treat the access request as successful. A remote authenticated user with an expired password can exploit this by using alternative authentication methods like SSH public key authentication to bypass access controls and gain unauthorized access.