CVE-2026-101001: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...

PT-2026-99809

Name of the Vulnerable Software and Affected Versions eBA Plus Document and Workflow Management System versions 6.7.141 through 10.0.10 Description Improper neutralization of input during web page generation in the Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management Syst...

PT-2026-99920

Name of the Vulnerable Software and Affected Versions IdentityIQ affected versions not specified Description An unauthenticated user can achieve remote code execution on the server due to improper input validation of content submitted to web service API endpoints. Recommendations At the moment,...

Before Acting, Change the State: Prospective State Intervention for Web Agents under Deceptive Interfaces

LLM-based Web agents can autonomously complete user tasks, yet deceptive interfaces can steer them toward outcomes that conflict with users' interests. Existing defenses primarily intervene on agent behavior through blocking, guidance, or replanning. We identify a distinct failure mode: a...

PT-2026-99810

Name of the Vulnerable Software and Affected Versions eBA Plus Document and Workflow Management System versions 6.7.141 through 10.0.10 Description An unrestricted upload of files with dangerous types allows an attacker to upload a web shell to the web server, which can lead to remote command...

CVE-2026-86530: Improper Neutralization of Special Elements used in an OS Command

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command...

Authlib library contains a signature‑verification bypass vulnerability

Overview Authlib versions up to and including 1.7.2 contain a signature‑verification bypass in the JSON Web Signature JWS general JSON serialization handling. The JsonWebSignature.deserializejson function accepts a JWS object with an empty "signatures" array and treats the payload as successfully...

Web Media Extensions Buffer Overflow

The vulnerability of Web Media Extensions, a type of multimedia extension, is related to overflowing buffers in dynamic memory. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

Exploit for CVE-2026-14281

CVE-2026-14281 Checker A lightweight, Windows-friendly Python...

[SECURITY] [DSA 6520-1] lemonldap-ng security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6520-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 27, 2026 https://www.debian.org/security/faq -...

CVE-2026-101041

The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...

[SECURITY] Fedora 44 Update: chromium-154.0.8037.57-1.fc44

Chromium is an open-source web browser, powered by WebKit Blink...

PT-2026-99545

Name of the Vulnerable Software and Affected Versions TOTOLINK N150RT version 3.4.0-B20201030 Description The Web Management Interface contains a flaw in the /boafrm/formWlSiteSurvey endpoint. Specifically, the system function fails to properly sanitize the wlanif argument, allowing a remote...

PT-2026-99547

Name of the Vulnerable Software and Affected Versions Netcore NBR200V2 version 1.3.241127.071246 Description An OS command injection flaw exists in the Web Management Interface component. A remote attacker can exploit this by manipulating the QUERY STRING argument passed to the eval function with...

CVE-2026-94132

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

CRLF Injection

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to CRLF Injection in the validateUrl process. An attacker can inject arbitrary web-server configuration lines by supplying a crafted subdomain redirect URL containing carriage return and...

CVE-2026-94132

The AcyMailing Enterprise extension for Joomla (versions 1.0.0 – 11.0.5 ) contains a Remote Code Execution (RCE) vulnerability. The root cause is that the mailbox actions in POP3 mode save incoming MIME attachments to the media/com_acym/upload/ directory without performing extension checks. This ...

CVE-2026-94132 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

[SECURITY] [DLA 4797-1] lemonldap-ng security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4797-1 [email protected] https://www.debian.org/lts/security/ Xavier Guimard September 26, 2026 https://wiki.debian.org/LTS -...