rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

EUVD-2026-119019

Missing Authorization vulnerability in Saeed MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MC Woocommerce Wishlist: from n/a through 2.0.3...

CVE-2026-119511

The MC Woocommerce Wishlist plugin (smart-wishlist-for-more-convert) for WordPress is vulnerable to a Broken Access Control issue in versions up to and including 2.0.3 . The root cause is a Missing Authorization vulnerability that allows for the exploitation of incorrectly configured access contr...

CVE-2026-119510

The MC Woocommerce Wishlist (smart-wishlist-for-more-convert) plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 2.0.3 . Exploitation details are not provi...

EUVD-2026-119012

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saeed MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Stored XSS.This issue affects MC Woocommerce Wishlist: from n/a through 2.0.3...

CVE-2026-102523

MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An...

CVE-2026-102523 MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION

MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An...

CVE-2026-102523 MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION

MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An...

CVE-2026-102523

In MariaDB server versions 10.11.1 through 10.11.18, 11.4.1 through 11.4.12, 11.8.1 through 11.8.8, 12.3.1 through 12.3.2, and 13.0.1 through 13.0.1, an authorization bypass exists due to missing filename encoding in the ALTER TABLE ... CONVERT ... PARTITION statement. An authenticated database u...

CVE-2016-3714

CVE-2016-3714 convert file.mvg o.png...

CVE-2026-9806

CVE-2026-9806 CVE-2026-9806 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting CTI Transmute versions prior to the patched release.The flaw exists in the notification panel, where notification messages containing user-controlled convert names are rendered in the notification bell...

md-to-slides (0.1.1), multi-convert (0.1.4) +1 more potentially affected by unknown CVE via is-it-ai (0.1.1)

is-it-ai PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on is-it-ai and may be impacted: - md-to-slides 0.1.1 - multi-convert 0.1.4 - skills-analyzer 0.1.1 Source cves: unknown CVE Source advisory: GHSA-76H8-W3PX-47HX...

Malicious code in multi-convert (PyPI)

Source: kam193 63d1834ac673303487e7c46affaf2be63ac0b142aaab8e79027144aad9cbd9de In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency is-it-ai, intentionally pinned by specific versions of...

CLEANSTART-2023-LI21461 perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0

Security vulnerability affects the perl-convert-asn1 package. perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0...

MAL-2026-18429 Malicious code in multi-convert (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 63d1834ac673303487e7c46affaf2be63ac0b142aaab8e79027144aad9cbd9de In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

Malicious code in multi-convert (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 63d1834ac673303487e7c46affaf2be63ac0b142aaab8e79027144aad9cbd9de In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

md-to-slides (0.1.1), multi-convert (0.1.4) +1 more potentially affected by unknown CVE via is-it-ai (0.1.1)

is-it-ai PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on is-it-ai and may be impacted: - md-to-slides 0.1.1 - multi-convert 0.1.4 - skills-analyzer 0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-18426...

CVE-2026-119342

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders attacker-supplied SVG through Apache Batik, and a scheme-less root-relative image reference bypasses...

CVE-2026-119342

The Stirling-PDF web application (versions 2.13.1 through 2.13.2 ) is vulnerable to a local file read (LFI) via the POST /api/v1/convert/svg/pdf endpoint. The root cause is a same-origin bypass where a scheme-less root-relative image reference evades SvgSanitizer.isExternalUrl() checks. This allo...

EUVD-2026-114456

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders attacker-supplied SVG through Apache Batik, and a scheme-less root-relative image reference bypasses...