CVE-2026-102523 MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION

MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An...

CVE-2026-102523

In MariaDB server versions 10.11.1 through 10.11.18, 11.4.1 through 11.4.12, 11.8.1 through 11.8.8, 12.3.1 through 12.3.2, and 13.0.1 through 13.0.1, an authorization bypass exists due to missing filename encoding in the ALTER TABLE ... CONVERT ... PARTITION statement. An authenticated database u...

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

CVE-2016-3714

CVE-2016-3714 convert file.mvg o.png...

CVE-2026-9806

CVE-2026-9806 CVE-2026-9806 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting CTI Transmute versions prior to the patched release.The flaw exists in the notification panel, where notification messages containing user-controlled convert names are rendered in the notification bell...

md-to-slides (0.1.1), multi-convert (0.1.4) +1 more potentially affected by unknown CVE via is-it-ai (0.1.1)

is-it-ai PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on is-it-ai and may be impacted: - md-to-slides 0.1.1 - multi-convert 0.1.4 - skills-analyzer 0.1.1 Source cves: unknown CVE Source advisory: GHSA-76H8-W3PX-47HX...

Malicious code in multi-convert (PyPI)

Source: kam193 63d1834ac673303487e7c46affaf2be63ac0b142aaab8e79027144aad9cbd9de In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency is-it-ai, intentionally pinned by specific versions of...

CLEANSTART-2023-LI21461 perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0

Security vulnerability affects the perl-convert-asn1 package. perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0...

MAL-2026-18429 Malicious code in multi-convert (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 63d1834ac673303487e7c46affaf2be63ac0b142aaab8e79027144aad9cbd9de In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

Malicious code in multi-convert (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 63d1834ac673303487e7c46affaf2be63ac0b142aaab8e79027144aad9cbd9de In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

md-to-slides (0.1.1), multi-convert (0.1.4) +1 more potentially affected by unknown CVE via is-it-ai (0.1.1)

is-it-ai PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on is-it-ai and may be impacted: - md-to-slides 0.1.1 - multi-convert 0.1.4 - skills-analyzer 0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-18426...

CVE-2026-119342

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders attacker-supplied SVG through Apache Batik, and a scheme-less root-relative image reference bypasses...

CVE-2026-119342

The Stirling-PDF web application (versions 2.13.1 through 2.13.2 ) is vulnerable to a local file read (LFI) via the POST /api/v1/convert/svg/pdf endpoint. The root cause is a same-origin bypass where a scheme-less root-relative image reference evades SvgSanitizer.isExternalUrl() checks. This allo...

EUVD-2026-114456

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders attacker-supplied SVG through Apache Batik, and a scheme-less root-relative image reference bypasses...

PT-2026-133700

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convert palette images to truecolor function. This is due to insufficient file type validation before processing uploaded files. This...

PT-2026-134197

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders attacker-supplied SVG through Apache Batik, and a scheme-less root-relative image reference bypasses...

CVE-2026-119342: Stirling-Tools Stirling-PDF: Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders attacker-supplied SVG through Apache Batik, and a scheme-less root-relative image reference bypasses...

Stirling Tools Stirling PDF input validation error vulnerability

A security vulnerability exists in Stirling Tools Stirling PDF versions from 2.13.1 up to but not including 2.13.2. This vulnerability arises because when the POST /api/v1/convert/svg/pdf endpoint processes SVG files submitted by attackers via Apache Batik, the relative image references generated...

CVE-2026-118038

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to...

CVE-2026-118038

Progress Telerik Document Processing Libraries prior to version 2026.3.1027 are affected by a path traversal vulnerability in the Convert and Merge AI agent tools . An authenticated attacker with low privileges can supply tool arguments containing relative file paths that resolve against the proc...