160629 matches found
CVE-2026-112140
A code injection vulnerability exists in llSourcell Doctor-Dignity (up to commit 3f2ffb6c892f13b50a708d05900d3227acb40ded ). The flaw is located in the _get_lib_module function within the python/mlc_chat/chat_module.py file. Specifically, manipulating the model_lib argument allows for remote code...
CVE-2026-112140 llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection
A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The...
CVE-2026-112139
A SQL injection vulnerability exists in the Administrative Mutation Handler component of the subhajitkhan online-clinic-management-system (up to commit e9ee77a8827a1446220fa07ee693dc4d9a29a578). The flaw is triggered by manipulating the docid argument within the admindocview.php file. This vulner...
CVE-2026-112139 subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection
A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...
EUVD-2026-104248
A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...
CVE-2026-112138
A path traversal vulnerability exists in diem-project diem up to version 5.1.3 . The flaw is located in the dmOs::join function within the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the dmCodeEditor component. An attacker can perform a remote manipulation to achieve path...
CVE-2026-112138 diem-project diem dmCodeEditor actions.class.php join path traversal
A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely...
EUVD-2026-104246
A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely...
CVE-2026-112105
A vulnerability has been found in GlitterWare Passy up to 1.10.1. The affected element is the function MyHttpOverrides in the library lib/main.dart of the component TLS Handler. Such manipulation leads to improper certificate validation. The attack may be launched remotely. This attack is...
CVE-2026-112106
A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d. Affected by this issue is some unknown functionality of the file index.php of the component TLS Handler. Such manipulation leads to improper certificate validation...
CVE-2026-112104
A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched...
CVE-2026-112108
A buffer overflow vulnerability exists in ztxz16 fastllm up to version 0.1.8.2 . The flaw is located in the GGUFBuffer::ReadString function within the file third_party/gguf/gguf.cpp of the String Parsing component. The root cause is the improper manipulation of the len argument, which can be trig...
CVE-2026-112108 ztxz16 fastllm String Parsing gguf.cpp ReadString buffer overflow
A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file thirdparty/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit ha...
EUVD-2026-104245
A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file thirdparty/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit ha...
CVE-2026-112107
A buffer overflow vulnerability exists in ztxz16 fastllm up to version 1.8.2 . The flaw is located within the SafeTensorItem::CreateBuffer function in the src/model.cpp file of the Safetensors Weight Loading component. The issue is caused by the improper manipulation of the data_offsets argument,...
CVE-2026-112107 ztxz16 fastllm Safetensors Weight Loading model.cpp CreateBuffer buffer overflow
A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument dataoffsets causes buffer overflow. The attack can be initiated remotel...
EUVD-2026-104243
A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument dataoffsets causes buffer overflow. The attack can be initiated remotel...
CVE-2026-112106
A security vulnerability exists in TufayelLUS TikTok-Video-Downloader-PHP affecting the TLS Handler component within the index.php file. The flaw leads to improper certificate validation , which could potentially be exploited remotely. While the attack requires a high level of complexity and is c...
CVE-2026-112106 TufayelLUS TikTok-Video-Downloader-PHP TLS index.php certificate validation
A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d. Affected by this issue is some unknown functionality of the file index.php of the component TLS Handler. Such manipulation leads to improper certificate validation...
EUVD-2026-104207
A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d. Affected by this issue is some unknown functionality of the file index.php of the component TLS Handler. Such manipulation leads to improper certificate validation...