5201 matches found
CVE-2026-105287: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups causes sql injection. The attack is possible to be...
EUVD-2026-91790
UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder that allows authenticated attackers to inject arbitrary SQL by supplying malicious assetType and groupName values that are inserted unsanitized into a native PostgreSQL query via String.forma...
PT-2026-104434
Name of the Vulnerable Software and Affected Versions UTMStack versions prior to 11.2.16 Description An issue exists in the searchQueryBuilder function of UtmAssetGroupService where authenticated attackers can inject arbitrary SQL. This occurs because the assetType and groupName variables are...
CVE-2026-62061
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...
EUVD-2026-90807
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...
CVE-2026-62061 WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...
CLEANSTART-2024-LX85594 Heap buffer overflow in tab groups in Google Chrome prior to 89
Security vulnerability affects the chromium package. Heap buffer overflow in tab groups in Google Chrome prior to 89...
CLEANSTART-2024-DM83445 Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92
Security vulnerability affects the chromium package. Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92...
CLEANSTART-2024-WX22664 Out of bounds write in Tab Groups in Google Chrome prior to 92
Security vulnerability affects the chromium package. Out of bounds write in Tab Groups in Google Chrome prior to 92...
CLEANSTART-2024-UT68300 Heap buffer overflow in Tab Groups in Google Chrome prior to 98
Security vulnerability affects the chromium package. Heap buffer overflow in Tab Groups in Google Chrome prior to 98...
CLEANSTART-2024-FM62766 Use after free in Tab Groups in Google Chrome prior to 102
Security vulnerability affects the chromium package. Use after free in Tab Groups in Google Chrome prior to 102...
CLEANSTART-2024-XR10355 Use after free in Interest groups in Google Chrome prior to 103
Security vulnerability affects the chromium package. Use after free in Interest groups in Google Chrome prior to 103...
AlmaLinux 9.2 [TuxCare] Security Update: protobuf / protobuf-compiler / protobuf-devel / protobuf-emacs / etc (ALMALINUX9.2:CLSA-2025:1757017511)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757017511 advisory. - Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupt...
CVE-2026-62061: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...
PT-2026-103859
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...
CLEANSTART-2024-MV49832 incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to t...
Security vulnerability affects the buildah package. An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary...
SUSE CVE-2026-102278
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...
CVE-2026-102585
A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group actually belongs to that course. An authenticated user with teacher privileges could exploit this flaw to add users to groups within courses...
Linux Distros Unpatched Vulnerability : CVE-2026-102278
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace...
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
Summary expand recurses once per level of brace nesting. Deeply nested input exhausts the native stack and crashes the process. This is distinct from CVE-2026-14257 / GHSA-mh99-v99m-4gvg, which made the tail iterative recursion on m.post, driven by how many groups are chained. Nesting depth drive...