CVE-2026-84059

A command injection flaw affects ICP DAS UA-2200 and UA-5200 (firmware up to 20260704). The vulnerable element is the ArmAngstromInstructionSet function in the endpoint /CGI?RestApi=SetHostname ; manipulating the ParameterArray argument allows remote command injection with low privileges and no u...

CVE-2026-84059 ICP DAS UA-2200/UA-5200 CGI ArmAngstromInstructionSet command injection

A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...

CVE-2026-80690

A flaw was found in the Linux kernel's SCSI Universal Flash Storage UFS core. When the ufshcdallochost function fails to initialize the hba-rpmbs list, it can lead to a null pointer dereference during device teardown. This vulnerability could allow a local attacker to cause a system crash,...

CVE-2026-82072

An out of bounds read flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=534416978 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

EUVD-2026-69000

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

EUVD-2026-68997

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customorder' parameter in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

CVE-2026-42393

A flaw was found in dovecot. The comparison mechanism for doveadm passwords and API keys is not fully timing safe. A remote attacker, with network access to the doveadm service, could repeatedly make requests and accurately measure response timings. This could allow the attacker to learn the leng...

CVE-2026-40019

A flaw was found in Dovecot's ManageSieve login process. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted, truncated quoted argument. This action causes the process to enter an infinite loop, consuming excessive CPU resources. Repeated exploitation can lea...

CVE-2026-74916

WP Fastest Cache WordPress plugin (versions 0.8.7.7 through 1.5.0 ) is vulnerable to unauthenticated cache poisoning via unkeyed tracking parameters. The plugin does not include certain tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing...

CVE-2026-40015

A flaw was found in Dovecot's imap-hibernate service. An authenticated attacker can open numerous connections and send malformed commands, leading to an out-of-bounds read. This can intermittently crash the process, interrupting hibernated IMAP sessions and causing a denial of service for affecte...

CVE-2026-75964

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping. This...

EUVD-2026-68984

A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function csetreportsdecode of the file mail-report.sh of the component JSON Parsing. The manipulation of the argument sender/recipients results in command injection. It is...

CVE-2026-83772

Cobham SATCOM VSAT7090 Maritime Satellite Router versions up to 20260704 are affected by a command injection vulnerability in the JSON Parsing component. The root cause lies in the function c_set_reports_decode within the file mail-report.sh , where unsanitized manipulation of the sender/recipien...

CVE-2026-83744

A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Purify.php of the component invoices Endpoint. The manipulation of the argument notes leads to server-side request forger...

CVE-2026-83744

Invoice Ninja up to 5.13.26 is affected by a Server-Side Request Forgery (SSRF) in the invoices Endpoint , specifically in the function Purify::isHostSafe within app/Services/Pdf/Purify.php. Manipulating the notes argument allows a remote, low-privileged attacker to forge server-side requests. Th...

CVE-2026-83744 invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgery

A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Purify.php of the component invoices Endpoint. The manipulation of the argument notes leads to server-side request forger...

CVE-2026-83743

Invoice Ninja versions up to 5.13.26 are affected by an authorization bypass in the Vendor Portal Profile Update component (file /vendor/profile/). By manipulating the vendor_contact argument, a remotely authenticated user (low privileges) can bypass access controls, resulting in low impact on co...

EUVD-2026-68981

A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Portal Profile Update. Executing a manipulation of the argument vendorcontact can lead to authorization bypass. The attack may be performed...

CVE-2026-83743 invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorization

A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Portal Profile Update. Executing a manipulation of the argument vendorcontact can lead to authorization bypass. The attack may be performed...

Malicious code in @yane88/workbuddy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00baaa53d63c0bababb9db20aa5e86149da604834a5761b827edd2f936178c91 At npm install time, @yane88/[email protected]'s postinstall script pulls three sibling npm packages @yane88/workbuddy-01, -02, -03, each shipping a...