Linux Distros Unpatched Vulnerability : CVE-2026-120194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery can enter an infinite loop when given a slice expression with a negative step...

PT-2026-134508

Name of the Vulnerable Software and Affected Versions json-glib affected versions not specified Description A flaw exists in the JSONPath slice evaluator used by the json path query function. When provided with a slice expression containing a negative step, the evaluator can enter an infinite loo...

CVE-2026-120194: Red Hat: A flaw was found in json-glib

A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service...

heroku-CVE-2013-0269

heroku-CVE-2013-0269 Inspect all of your heroku apps to see if they are running a vulnerable version of JSON Background A security vulnerability has been found in the Ruby JSON gem. This is the root cause for the recently-announced MySQL injection issue in Rails. A new release of the JSON gem is...

CVE-2026-89274-wp-recipe-maker-poc

CVE-2026-89274 - WP Recipe Maker Arbitrary Shortcode Execution Validation Lab Security-research material for reproducing and validating CVE-2026-89274 : WP Recipe Maker Use only on systems you own or are explicitly authorized to test. The PoC posts one rating comment containing a lab-registered...

Exploit for CVE-2026-61515

CVE-2026-61515 — Puwell IP Camera: RCE через DebugShell на TCP...

CVE-2026-66916

Password-Protected Category Bypass via JSON Format in JoomGallery JoomGallery ≤ 4.3.0-stable — Unauthenticated Attacker Bypasses Password Gate to Download Protected Images SUMMARY An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is...

Password-Strength-Evaluator

Password Strength Evaluator Password Strength Evaluator is a tool to evaluate the strength of passwords and provide recommendations to improve their security. This tool also checks if your password has been exposed in any data breaches using the Have I Been Pwned API. Additionally, it stores the...

CVE-2026-55613

The uhttpd HTTP server contains an application-layer body-handler flaw in the uh_ubus_data_send() function within ubus.c . When a POST /ubus JSON body arrives in multiple TCP segments, an initial segment completing a JSON object can cause subsequent segments to take an existing-object parse-error...

CVE-2026-62979

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, middleware/handle-error.ts serializes raw FetchError objects into HTTP responses. lib/servers/base.ts attaches outbound request headers on upstream non-success responses and schema-validation...

Exploit for CVE-2026-109384

CVE-2026-109384 — IvyForms Author: NØXCRYPT · @noxcrypt-...

EUVD-2026-114471

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, middleware/handle-error.ts serializes raw FetchError objects into HTTP responses. lib/servers/base.ts attaches outbound request headers on upstream non-success responses and schema-validation...

openmeetings-kms-unauth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-kms-unauth Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-kms-unauth Class: Unauth KMS Reach: Remote Apache OpenMeetings 9.1.0 9773c59e - Apache Software Foundation...

CVE-2020-10257

/ \ \ / / || \ \ / |/ \ | | | \ V /| |/ / / / || | / /| \ / / | / || /// ||/|/// by darkcast CVE-2020-10257: WordPress TRX Addons Plugin Unauthenticated Remote Code Execution RCE Vulnerability Affected Plugin: TRX Addons Vulnerability Type: Unauthenticated Remote Code Execution RCE CVSS Score:...

CVE-2026-105924

A flaw was found in Qt. This vulnerability allows an attacker to trigger a Denial of Service DoS by providing specially crafted Concise Binary Object Representation CBOR data. When the application converts this input into JavaScript Object Notation JSON format using QCborValue, a NULL pointer...

web3-decoder

Web3 Decoder Web3 Decoder is a Burp Suite Extension designed for analyzing blockchain operations and smart contract interactions. It processes JSON-RPC calls to Ethereum and compatible networks including Polygon, Arbitrum, BSC, and others Block explorers API Keys Most block explorers supported,...

CVE-2026-119762

Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of service vulnerability caused by unbounded nesting depth when parsing SOAP/XML and JSON request bodies before authentication. Attackers can send a single deeply nested request t...

CLEANSTART-2026-SW70852 Delete function fails to properly validate offsets when processing malformed JSON input

CVE-2026-32285 affects multiple packages. The Delete function fails to properly validate offsets when processing malformed JSON input. See references for individual vulnerability details...

CLEANSTART-2026-AZ51033 ajv (Another JSON Schema Validator) before 8

CVE-2025-69873 affects multiple packages. ajv Another JSON Schema Validator before 8. See references for individual vulnerability details...

EUVD-2026-114239

Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of service vulnerability caused by unbounded nesting depth when parsing SOAP/XML and JSON request bodies before authentication. Attackers can send a single deeply nested request t...