PT-2026-107855

Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code...

Langflow AI Custom Component Eval Injection Unauthenticated Remote Code Execution

Langflow version 1.3.2 is susceptible to unauthenticated remote code execution due to improper input validation in the evalcustomcomponentcode function. Arbitrary code executes under the context of the backend Langflow process. This module requires Metasploit: https://metasploit.com/download...

CVE-2025-12758

CVE-2025-12758: تجاوز محدد التنويع الموحّد Unicode Variation Selector في الدالة isLength من Validator.js معرّف CVE: CVE-2025-12758 درجة CVSS: 8.7 HIGH الحرجية: HIGH CWE: CWE-792 تصفية غير مكتملة لمثيل واحد أو أكثر من العناصر الخاصة تاريخ النشر: 26 نوفمبر 2025 تاريخ الإفصاح: 19 أكتوبر 2025 نظرة عا...

CVE-2026-94154 Aurora Heatmap <= 1.7.2 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter

The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts...

CVE-2025-25347

CVE-2025-25347 نظرة عامة تُستخدم هذه الأداة لاختبار الثغرة CVE-2025-25347 في لوحة QingLong، وهي منصة مفتوحة المصدر لإدارة أتمتة المهام. تسمح هذه الثغرة بتنفيذ التعليمات البرمجية عن بُعد Remote Code Execution RCE لأن اللوحة لا تطبق التحقق من الإدخال والتحكم في الوصول بشكل كافٍ على نقاط نهاية معينة...

CVE-2026-76279

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to an improper input validation flaw in the collect Search Processing Language (SPL) command. The root cause is that the system fails to normalize whitespace in index names before enforcing role-based index-access...

CVE-2026-76279 Improper Input Validation of Index Names through the collect Command in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to write events to internal indexes outside the index access configured for the role. The vulnerability is...

CVE-2026-76277

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to improper input validation when creating native Splunk usernames via the REST API . A user with the edit_user capability can create a username ending in a trailing period because the system fails to reject it be...

CVE-2026-76277 Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edituser capability could create a native Splunk username that ends with a period. The vulnerability is possible because username validation does not reject a trailing period before the...

CVE-2026-76273

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to improper input validation via the collect Search Processing Language (SPL) command. An attacker with the run_collect capability can exploit the fact that the command fails to validate the index name before proc...

CVE-2026-76273 Improper Input Validation through the collect Command in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to add attacker-controlled content to system-level messages on the Splunk platform instance. The...

GHSA-P944-4XH2-X776 Docling: Crafted DoclingDocument JSON embeds local image files into converted output

Summary docling accepts serialized DoclingDocument JSON as an input format InputFormat.JSONDOCLING, enabled by default. A crafted JSON file can set a picture's image uri to a local file path. When the converted document is exported with embedded images ImageRefMode.EMBEDDED, the CLI default for...

EUVD-2026-93993

Backstage: Improper input validation in Sentry scaffolder actions...

Backstage: Improper input validation in Sentry scaffolder actions

Impact An authenticated internal user who can execute the affected actions may cause the backend to contact unintended destinations and disclose Sentry integration credentials. Subsequent impact depends on network reachability and the privileges granted to the configured token. Patches Upgrade...

GHSA-G734-FHP4-7MFP Backstage: Improper input validation in Sentry scaffolder actions

Impact An authenticated internal user who can execute the affected actions may cause the backend to contact unintended destinations and disclose Sentry integration credentials. Subsequent impact depends on network reachability and the privileges granted to the configured token. Patches Upgrade...

EUVD-2026-93556

ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions...

CVE-2025-50565

CVE-2025-50565 الوصف يحتوي Doubo ERP 1.0 على ثغرة حقن SQL بسبب عدم تصفية مدخلات المستخدم، والتي يمكن أن يبدأها مهاجم عن بُعد. نوع الثغرة حقن SQL نوع الهجوم عن بُعد تأثير كشف المعلومات true هل أكد البائع true المكتشف https://www.jump.net.cn المرجع https://www.jump.net.cn https://v12.icu قاعدة كود...

Security Bulletin:RSCT 3.0 Improper Input Validation Denial of Service Vulnerability

Summary IBM Reliable Scalable Cluster Technology RSCT 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation. Vulnerability Details CVEID:CVE-2026-14514 DESCRIPTION: IBM Reliable Scalable Cluster Technology RSCT 3.0 coul...

Security Bulletin:UltraJSON Malformed UTF-8 Byte Sequence Vulnerability

Summary UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps or ujson.dump or ujson.encode have a rejectbytes=False option. When set, they may accept malformed or truncated UTF-8 byte sequences, silently rewriting them into...

Backstage: Improper input validation in Confluence to Markdown scaffolder module

Impact Insufficient input validation in the Confluence to Markdown scaffolder module could allow an attacker to influence file write operations during template execution. Exploitation requires a Backstage user to run a template that processes attacker-influenced Confluence content. Patches Patche...