Origin Validation Error

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error via incorrect attribution of the requesting origin in HandleExternalProtocolInUI when handling...

Origin Validation Error

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error via incorrect attribution of the requesting origin in HandleExternalProtocolInUI wh...

EUVD-2026-107547

Django REST framework: TokenProxy.delete reports success and revokes nothing...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-shield 한국어 Stopgap protection for...

Origin Validation Error

Overview org.webjars.npm:webpack-dev-server is an Uses webpack with a development server that provides live reloading. It should be used for development only. Affected versions of this package are vulnerable to Origin Validation Error via the WebSocket upgrade handler in lib/Server.js when a...

Origin Validation Error

Overview webpack-dev-server is an Uses webpack with a development server that provides live reloading. It should be used for development only. Affected versions of this package are vulnerable to Origin Validation Error via the WebSocket upgrade handler in lib/Server.js when a devServer.proxy entr...

CVE-2026-114718

A flaw was found in roundcubemail. The password plugin does not properly sanitize error messages returned by password drivers before displaying them in the web interface. A remote attacker or backend service capable of controlling these error responses can execute arbitrary script code in the...

CVE-2026-114348

A flaw was found in webpack-dev-server. An unauthenticated remote attacker can exploit improper Host header validation in the open-editor endpoint to obtain sensitive technical information. By sending a request with a specially crafted Host header, the attacker triggers an internal server error...

CVE-2026-114460

A flaw was found in modqos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker could exploit this...

UBUNTU-CVE-2026-114460

A flaw was found in modqos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker could exploit this...

CVE-2026-114460

A flaw was found in modqos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker could exploit this...

undici: undici: Denial of Service via unhandled stream error on excessive content encodings

A flaw was found in undici. When an application sends a request to a malicious remote server, the server can return a response with excessive content encodings and immediately close the connection. Because the underlying response stream is left unhandled, this abrupt closure triggers an unhandled...

CVE-2026-98675

A flaw was found in the Linux kernel's Analog Devices ADE9000 driver. An off-by-one error in the interrupt handler sets an incorrect upper bound when scanning device status events. Consequently, the driver fails to detect and report Phase C power dip events to the operating system, preventing...

CLEANSTART-2026-EI53048 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer

Security vulnerability affects the rclone package. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

GitLab input validation error vulnerability

Versions 17.4 prior to GitLab EE 19.3.6, version 19.4 prior to 19.4.3, and version 19.5 prior to 19.5.1 contain an input validation error vulnerability. This vulnerability stems from improper access control during synchronization of approval rules, potentially allowing authenticated users to bypa...

Pascal Buchbinder mod_qos buffer error vulnerability

Versions 11.74, 11.76, and 11.79 of Pascal Buchbinder’s modqos contain a buffer error vulnerability. This vulnerability arises when processing percent-encoded inputs during JSON body filtering; improper termination of strings can lead to reading beyond allocated memory boundaries. As a result,...

MessagePack resource management error vulnerability

Versions of MessagePack prior to 1.2.3 contain a resource management error vulnerability. This vulnerability arises because the C extension fails to deserialize values when strictmapkey is set to True; as a result, decoded map values are leaked. Repeated malformed inputs can lead to unbounded...

Authlib input validation error vulnerability

Versions of Authlib from 1.3.1 up to but not including 1.9.0 contain a security vulnerability. This vulnerability arises because OctKey.importkey checks for asymmetric key markers only at byte zero. However, PEM loaders accept leading whitespace, comments, or byte-order markers, which may allow...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142735 advisory. In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhpinvokecallback unwinds earlier callbacks...

Smile Digital Health HAPI FHIR resource management error vulnerability

Smile Digital Health HAPI FHIR contains a resource management error vulnerability. This vulnerability stems from improper handling of highly compressed data, which may allow unauthenticated attackers to send compressed payloads. This could result in server heap exhaustion or cause certain service...