CVE-2026-100804 Sandbox escape due to use-after-free in the Preferences: Backend component

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157...

EUVD-2026-88957

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157...

CVE-2026-100804

The Firefox browser is affected by a sandbox escape vulnerability caused by a use-after-free flaw in the Preferences: Backend component. This issue allows for potential sandbox circumvention, and the vulnerability was resolved in Firefox 157 . No specific exploit details or in-the-wild exploitati...

BIT-ENVOY-2026-73548 Envoy: Cross-user response poisoning via a generic (non-WebSocket) HTTP upgrade on Envoy's shared backend pool

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy forwards data for a configured non-WebSocket HTTP upgrade before the upstream accepts the upgrade. An unauthenticated HTTP/2 client can place a complete...

CVE-2026-102293

A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backend. The manipulation of the argument isAdmin/jobId leads to improper authorization. Remote exploitation of the attack ...

EUVD-2026-88643

A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backend. The manipulation of the argument isAdmin/jobId leads to improper authorization. Remote exploitation of the attack ...

CVE-2026-102293

A vulnerability exists in realjerrytang tacomall 1.0.0 within the api-admin Backend component. Specifically, the OrgStaffServiceImpl.add function in the ApiMaApplication.java file is susceptible to improper authorization when the isAdmin/jobId arguments are manipulated. This flaw allows for remot...

NextJS-CVE-2025-29927

🔓 NextJS-CVE-2025-29927 - 취약한 데모 애플리케이션 이 프로젝트는 CVE-2025-29927 을 시연하는 취약한 Next.js 애플리케이션 입니다. 이 취약점은 Next.js를 사용하는 웹 애플리케이션에서 부적절한 입력 처리 또는 접근 제어 결함으로 인해 발생하는 보안 결함입니다. 이 프로젝트는 MySQL 백엔드와 JWT 인증을 사용하며 교육 및 테스트 목적 으로만 설계되었습니다. 예를 들어 침투 테스트 실습, 책임 있는 공개 데모, 보안 연구 등에 사용할 수 있습니다. users.csv에 있는 테스트 계정...

Amazon Linux 2023 : libssh, libssh-config, libssh-devel (ALAS2023-2026-3096)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3096 advisory. A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and...

PT-2026-102578

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Thunderbird versions prior to 157 Description A use-after-free issue exists in the Preferences: Backend component, which can lead to a sandbox escape. A use-after-free occurs when a program continues to use a...

Amazon Linux 2 : gvfs (ALAS-2026-3943)

The version of gvfs installed on the remote host is prior to 1.36.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3943 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply t...

Important: gvfs

Issue Overview: A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buff...

CVE-2026-102293: Improper Authorization

A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backend. The manipulation of the argument isAdmin/jobId leads to improper authorization. Remote exploitation of the attack ...

CVE-2026-86035: Improper Neutralization of Special Elements used in an OS Command

Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its Mercurial backend. Repository filenames beginning with - could be interpreted as Mercurial options instead of literal...

CVE-2025-57819

CVE-2025-57819 - FreePBX 인증되지 않은 원격 코드 실행RCE CVE-2025-57819는 Sangoma FreePBX 버전 15, 16, 17 에 영향을 미치는 치명적인 원격 코드 실행RCE 취약점입니다. 이 취약점은 취약한 엔드포인트 내 사용자 제어 입력값의 불충분한 검증sanitization 에서 비롯되며, 인증되지 않은 공격자가 인증을 우회하고, 애플리케이션의 백엔드 데이터베이스를 조작하며, 궁극적으로 기본 서버에서 임의의 운영 체제 명령을 실행할 수 있게 합니다. CVSS v3 기준...

osiris

⬡ OSIRIS Open Source Intelligence & Reconnaissance Integrated System A real-time global intelligence dashboard that aggregates live flight tracking, CCTV networks, earthquake monitoring, conflict zone mapping, and 24/7 news feeds into a single GPU-accelerated interface. Live Demo · Report Bug ·...

CVE-2026-101078

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

database-sentinel

🛡️ Database Sentinel（数据库哨兵） 一个用于审计数据库后端安全漏洞的 Claude 技能。 将其放入 Claude Code、Cursor 或任何基于 Claude 的环境中。说“审计我的数据库”，即可获得一份全面的安全报告以及精确的修复代码——只需几分钟，而非数天。 超过 170 个 Lovable 应用遭到入侵。 YC 初创公司中 2010 万行数据被暴露。约 87,000 个 MongoDB 实例易受 MongoBleed 攻击（CVE-2025-14847，CISA KEV）。仅在 2025 年的一次事件中就有 180 万个 Firebase 密码泄露。45% ...

CVE-2026-101078

A vulnerability exists in deepseek-ai deepseek-harness versions up to 0.1.7-rc.2 within the Landlock Backend component. The issue stems from an unknown function in the file packages/sandbox/sandbox-local/src/profiles.ts, which can lead to improper isolation or compartmentalization . Exploitation ...

EUVD-2026-88334

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...