92687 matches found
CVE-2026-19967
A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...
CVE-2026-19964
A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jijmcp/pythonrepr.py of the component jmcheck. The manipulation of the argument code results in code injection. It is possible to launch the attack remotely. The exploit has been made...
CVE-2026-19963
A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
CVE-2026-19965
A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...
CVE-2026-19962
A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...
CVE-2026-19966
CVE-2026-19966 affects CodeCanyon TimeCamp Integration for CRM (up to v2.8). The vulnerability resides in processing of /clients/save_contact, where manipulating contact_id can bypass authorization. It can be exploited remotely and a public exploit exists. The provided documents do not specify a ...
EUVD-2026-60011
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/savecontact of the component Contact Information Update. Such manipulation of the argument contactid leads to authorization bypass. The attack can b...
CVE-2026-19966 CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/savecontact of the component Contact Information Update. Such manipulation of the argument contactid leads to authorization bypass. The attack can b...
EUVD-2026-60010
A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...
CVE-2026-19965 automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy
A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...
CVE-2026-19965
The CVE-2026-19965 affects automad up to version 2.0.0-beta.32. It targets the Password Reset Endpoint’s requestPasswordResetToken in automad/src/server/Controllers/API/UserController.php, where manipulation of the name-or-email argument causes observable response discrepancies. The issue can be ...
CVE-2026-67678
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code...
PT-2026-73181
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save contact of the component Contact Information Update. Such manipulation of the argument contact id leads to authorization bypass. The attack can...
CVE-2026-67918
Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint...
PT-2026-76871
Name of the Vulnerable Software and Affected Versions S2OPC version 1.7.3 Description A heap-based out-of-bounds write occurs during server-side EventFilter handling while processing CreateMonitoredItems. This flaw allows a remote attacker to execute arbitrary code. A heap-based out-of-bounds wri...
CVE-2026-50776
A Directory Traversal vulnerability in Pronis Loisirs Bilttorie CSE (versions before April 2026) allows an unauthenticated remote attacker to read sensitive files and execute arbitrary code. CVSS 3.1 scores it 7.5 (HIGH) with network attack vector, low complexity, and high confidentiality impact....
The vulnerability in the driver/block/rnbd/rnbd-srv.c component of the Linux operating system’s kernel allows a hacker to gain access to confidential data.
The vulnerability of the drivers/block/rnbd/rnbd-srv.c component in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...
The vulnerability of the EncryptInterceptor module in the Apache Tomcat application server allows a hacker to perform a replay attack.
The vulnerability of the EncryptInterceptor module in the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to carry out a replay attack...
The vulnerability in the Apache ActiveMQ and Apache ActiveMQ Web software for web management consoles allows attackers to inject malicious HTML content.
The vulnerability of the Apache ActiveMQ and Apache ActiveMQ Web software for web management consoles is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject malicious HTML content remotely...