EUVD-2026-104246

A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely...

CVE-2026-112138

A path traversal vulnerability exists in diem-project diem up to version 5.1.3 . The flaw is located in the dmOs::join function within the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the dmCodeEditor component. An attacker can perform a remote manipulation to achieve path...

CVE-2026-112138 diem-project diem dmCodeEditor actions.class.php join path traversal

A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely...

CVE-2026-112105

A vulnerability has been found in GlitterWare Passy up to 1.10.1. The affected element is the function MyHttpOverrides in the library lib/main.dart of the component TLS Handler. Such manipulation leads to improper certificate validation. The attack may be launched remotely. This attack is...

CVE-2026-112106

A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d. Affected by this issue is some unknown functionality of the file index.php of the component TLS Handler. Such manipulation leads to improper certificate validation...

CVE-2026-112104

A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched...

EUVD-2026-104245

A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file thirdparty/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit ha...

CVE-2026-112108

A buffer overflow vulnerability exists in ztxz16 fastllm up to version 0.1.8.2 . The flaw is located in the GGUFBuffer::ReadString function within the file third_party/gguf/gguf.cpp of the String Parsing component. The root cause is the improper manipulation of the len argument, which can be trig...

CVE-2026-112108 ztxz16 fastllm String Parsing gguf.cpp ReadString buffer overflow

A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file thirdparty/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit ha...

CVE-2026-112107

A buffer overflow vulnerability exists in ztxz16 fastllm up to version 1.8.2 . The flaw is located within the SafeTensorItem::CreateBuffer function in the src/model.cpp file of the Safetensors Weight Loading component. The issue is caused by the improper manipulation of the data_offsets argument,...

EUVD-2026-104243

A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument dataoffsets causes buffer overflow. The attack can be initiated remotel...

CVE-2026-112107 ztxz16 fastllm Safetensors Weight Loading model.cpp CreateBuffer buffer overflow

A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument dataoffsets causes buffer overflow. The attack can be initiated remotel...

CVE-2026-112106

A security vulnerability exists in TufayelLUS TikTok-Video-Downloader-PHP affecting the TLS Handler component within the index.php file. The flaw leads to improper certificate validation , which could potentially be exploited remotely. While the attack requires a high level of complexity and is c...

EUVD-2026-104207

A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d. Affected by this issue is some unknown functionality of the file index.php of the component TLS Handler. Such manipulation leads to improper certificate validation...

CVE-2026-112106 TufayelLUS TikTok-Video-Downloader-PHP TLS index.php certificate validation

A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d. Affected by this issue is some unknown functionality of the file index.php of the component TLS Handler. Such manipulation leads to improper certificate validation...

CVE-2021-3395

CVE-2021-3395 Suggested description A cross-site scripting XSS vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment. Vulnerability Type Cross Site Scripting XSS Vendor of Product OOO...

CVE-2020-24032

CVE-2020-24032 Suggested description tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. VulnerabilityType Other OS command injection Vendor of Product XoruX s.r.o. Affected Product Code Base LPAR2RRD and...

CVE-2026-112102

A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument condition results in code injection. It is possible to launch...

CVE-2026-112104

The eremef bandcamp-player software (up to version 1.8.33-beta ) contains a vulnerability in the Remote Control Server component. Specifically, an unknown function within the database.ts file fails to properly enforce authentication when the remoteEnabled argument is manipulated. This flaw allows...

EUVD-2026-104219

A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched...