CVE-2026-15684

CVE-2026-15684 affects Glarysoft Glary Utilities. The flaw resides in the Disk Clean functionality, where an attacker who can run low-privileged code can abuse a folder junction to delete arbitrary files, enabling a local privilege escalation to SYSTEM and potential arbitrary code execution. The ...

CVE-2026-15684 Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability

Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system...

ailingo (>=0.2.0, <=0.4.0), articulo (>=0.3.1, <=0.5.1) +153 more potentially affected by CVE-2026-49825 via lxml-html-clean (>=0.1.0, <=0.4.4)

lxml-html-clean PYPI version =0.1.0, =0.2.0, =0.3.1, =0.1.19, =0.0.550, =0.70.0, =0.46.0, =0.1.0, =4.10.0, =1.0.0, =2.0.0, =0.1.0, =3.0.0, =1.0.0, =1.6.7, =2.1.1 and more Source cves: CVE-2026-49825 Source advisory: OSV:PYSEC-2026-2614...

d-clean (0.0.2), fabric3 (>=1.11.1.post1, <=1.12.0.post1) +4 more potentially affected by CVE-2026-44405 via paramiko (1.18.5)

paramiko PYPI version 1.18.5 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - d-clean 0.0.2 - fabric3 =1.11.1.post1, =1.0.2, =0.1.0.dev22, =0.1.0.dev27 - vr-server 6.11.0 - wazimap 2.1.0 Source cves: CVE-2026-44405 Source...

HarmQ: Harmonic Backdoor Attacks against Quantum Neural Networks

Quantum Neural Networks QNNs have emerged as a promising paradigm for quantum machine learning in the Noisy Intermediate-Scale Quantum NISQ era, leveraging quantum phenomena such as superposition and entanglement to process information in exponentially large Hilbert spaces. However, QNNs inherit...

CVE-2026-15684: Improper Link Resolution Before File Access

Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system...

EUVD-2026-43090

vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions:...

EUVD-2026-43048

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Spam by CleanTalk versions: from 0.0.0 to 9.7.1...

CVE-2026-15087

vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions:...

CVE-2026-10770

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Spam by CleanTalk versions: from 0.0.0 to 9.7.1...

CVE-2026-15087

vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions:...

CVE-2026-15087 Clean RESTful - Critical - Unsupported - SA-CONTRIB-2026-078

vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions:...

CVE-2026-15087

The Drupal Clean RESTful module (versions . *) is subject to a security issue identified as CVE-2026-15087 . According to security advisories, the project is being marked as unsupported because of a known security issue that has not been fixed by the maintainer. While the specific root cause is n...

CVE-2026-15087

vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions:...

CVE-2026-15087 Clean RESTful - Critical - Unsupported - SA-CONTRIB-2026-078

vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions:...

CVE-2026-15087: Improper Authentication

vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions:...

vuln-chain-3-4-14-demo

vuln-chain-spring-boot — a Trivy "green but owned" demo An in...

ailingo (>=0.2.0, <=0.4.0), articulo (>=0.3.1, <=0.5.1) +153 more potentially affected by CVE-2026-49825 via lxml-html-clean (>=0.1.0, <=0.4.4)

lxml-html-clean PYPI version =0.1.0, =0.2.0, =0.3.1, =0.1.19, =0.0.550, =0.70.0, =0.46.0, =0.1.0, =4.10.0, =1.0.0, =2.0.0, =0.1.0, =3.0.0, =1.0.0, =1.6.7, =2.1.1 and more Source cves: CVE-2026-49825 Source advisory: SNYK:PYTHON-LXMLHTMLCLEAN-17911675...

ailingo (>=0.2.0, <=0.4.0), articulo (>=0.3.1, <=0.5.1) +153 more potentially affected by CVE-2026-49825 via lxml-html-clean (>=0.1.0, <=0.4.4)

lxml-html-clean PYPI version =0.1.0, =0.2.0, =0.3.1, =0.1.19, =0.0.550, =0.70.0, =0.46.0, =0.1.0, =4.10.0, =1.0.0, =2.0.0, =0.1.0, =3.0.0, =1.0.0, =1.6.7, =2.1.1 and more Source cves: CVE-2026-49825 Source advisory: OSV:GHSA-4JHM-JV67-739F...

Incomplete List of Disallowed Inputs

Overview lxml-html-clean is a HTML cleaner from lxml project Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs in the Cleaner process when handling namespaced URL attributes such as xlink:href with the safeattrsonly=False configuration. An attacker can execu...