CVE-2025-68391 Arbitrary File Upload in Protectel

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to...

EUVD-2025-211223

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to...

CVE-2025-68391

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to an arbitrary file upload vulnerability. This flaw allows any user to upload files and override existing files within a temporary folder. The primary impact is the potential execution of embedded JavaScript scripts when an authentic...

CVE-2025-68391 Arbitrary File Upload in Protectel

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to...

CVE-2026-119408 n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden...

CVE-2026-119408 n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden...

CVE-2026-119408

The n8n workflow automation tool is vulnerable to remote code execution in versions before 2.42.6, 2.43.3, and 3.0.1. The vulnerability exists within deprecated Function , Function Item , and LangChain Code nodes. When these nodes run outside of task runner isolation, authenticated users with per...

CVE-2026-85268

A Cross-Site Scripting XSS CWE-79 vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID...

CVE-2025-61319

CVE-2025-61319: Stored XSS in ReNgine 2. After scan completion, open the Vulnerabilities tab in ReNgine and view results. 3. The payload executes in the admin's browser context. Affected versions ReNgine = 2.2.0 Remediation Sanitize and escape user-supplied input before rendering scan results...

CLEANSTART-2026-CA96304 When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression

CVE-2026-94448 affects multiple packages. When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. See references for individual vulnerability details...

CLEANSTART-2026-HS80438 KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web

Security vulnerability affects the renovate package. KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web...

CLEANSTART-2026-TW49486 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the renovate package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-YS65548 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the renovate package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-KL52798 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the renovate package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-UM30043 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the renovate package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CVE-2025-61454

🛡️ CVE Disclosure: CVE-2025-61454 — Reflected XSS in E-commerce Project Disclosure Date: 14 October 2025 CVE ID: CVE-2025-61454 Severity: MEDIUM CVSS 6.1 🧩 Summary A reflected Cross-Site Scripting XSS vulnerability exists in the E-commerce Project v1.0, specifically within the search.php endpoint...

CLEANSTART-2026-SL86123 protobufjs compiles protobuf definitions into JavaScript (JS) functions

Security vulnerability affects the renovate package. protobufjs compiles protobuf definitions into JavaScript JS functions...

CLEANSTART-2026-QT32731 protobufjs compiles protobuf definitions into JavaScript (JS) functions

Security vulnerability affects the renovate package. protobufjs compiles protobuf definitions into JavaScript JS functions...

CLEANSTART-2026-GW41768 adm-zip is a JavaScript library for creating and extracting ZIP archives in Node

Security vulnerability affects the renovate package. adm-zip is a JavaScript library for creating and extracting ZIP archives in Node...

CLEANSTART-2026-UF90597 adm-zip is a JavaScript library for creating and extracting ZIP archives in Node

Security vulnerability affects the renovate package. adm-zip is a JavaScript library for creating and extracting ZIP archives in Node...