3877 matches found
EUVD-2026-52478
An issue in the CFCFDPRecvMd component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure...
CVE-2026-67973
An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via replaying final CFDP PDUs...
CVE-2026-67973
CVE-2026-67973 affects NASA cFS v7.0.1 in the CFDP receive path. The issue enables a DoS by replaying final CFDP PDUs, as described in the CVE and corroborated by multiple sources (NVD, EUVD ENISA, CVE Repo). The root cause is tied to the CFDP receive path; no explicit exploit code, products, ver...
PT-2026-66760
Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 2.6.1 Description An open redirect issue exists in the 'exit.php' endpoint. Unauthenticated attackers can redirect users to arbitrary external sites by providing a malicious Base64-encoded url parameter. This occu...
CLEANSTART-2026-AD69953 Security fixes in argo-cd-fips 3.1.14-r0
Package argo-cd-fips version 3.1.14-r0 fixes 14 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...
CVE-2026-64513
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for x86 architectures. When the apicupdateppr function does not find a deliverable interrupt, it fails to recompute the CR8 intercept, leading to a stale Task Priority Register Threshold TPRTHRESHOLD. This issue can cause a...
CVE-2026-18186
CVE-2026-18186 affects the ADM platform’s FTP Backup component. The issue is a stored format-string vulnerability where user-controlled backup configuration data may be written into a task log and later processed via an unsafe format-string operation. Exploitation can lead to memory information d...
WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by TurboNexic in WordPress Plugin Colissimo Officiel : Méthodes de livraison pour WooCommerce versions = 2.10.0...
Malicious code in node-array-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ce58719e0587902be3a6436f329ce631317fe3a7c322d89f9c679cd6e1a744 index.js is heavily obfuscated with a 312-entry rotated string array plus RC4/base64 decoders that hide identifiers and literals. On require, the...
CVE-2026-48051
Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, Papra's webhook delivery system contains an SSRF protection bypass that allows any authenticated organisation member to cause the server to make HTTP requests to internal addresses — loopback, link-local,...
CVE-2026-48051 Papra: SSRF via HTTP redirect bypass in webhook delivery
Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, Papra's webhook delivery system contains an SSRF protection bypass that allows any authenticated organisation member to cause the server to make HTTP requests to internal addresses — loopback, link-local,...
UBUNTU-CVE-2026-64513
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Unconditionally recompute CR8 intercept on PPR update The TPRTHRESHOLD field in the VMCS is used by VMX to induce VM exits when the guest's virtual TPR falls under the specified threshold, allowing KVM to inject...
CVE-2026-64513
CVE-2026-64513 affects the Linux kernel KVM x86 path, where CR8 intercept is recomputed on PPR update. Root cause: after a patch to speed up TPR below-threshold vmexits, apic_update_ppr() can omit a deliverable interrupt, causing kvm_lapic_update_cr8_intercept() and vmx_update_cr8_intercept() to ...
CVE-2026-64513 KVM: x86: Unconditionally recompute CR8 intercept on PPR update
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Unconditionally recompute CR8 intercept on PPR update The TPRTHRESHOLD field in the VMCS is used by VMX to induce VM exits when the guest's virtual TPR falls under the specified threshold, allowing KVM to inject...
BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate an active phishing kit to impersonate the videoconferencing platforms in social engineering campaigns designed to deliver malware. "BlueNoroff ha...
PYSEC-2026-3519 PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding
Jobs webhook SSRF protection bypass via DNS rebinding Summary PraisonAI's Async Jobs API validates webhookurl when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound to the later network reques...
CVE-2026-64874
Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...
EUVD-2026-47912
Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...