CVE-2026-116898 REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move

REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target category permission, ignoring the source category. Authenticated backend users with permission for one media category can move files from restricted categories into it, then...

CVE-2026-116898 REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move

REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target category permission, ignoring the source category. Authenticated backend users with permission for one media category can move files from restricted categories into it, then...

EUVD-2026-110794

REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target category permission, ignoring the source category. Authenticated backend users with permission for one media category can move files from restricted categories into it, then...

CVE-2026-65210

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role...

CVE-2026-65210 Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role...

EUVD-2026-110637

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role...

CVE-2026-65210

A vulnerability in the Supermicro BMC IPMI feature allows an authenticated IPMI Administrator to perform arbitrary file access on the BMC filesystem. This flaw enables the disclosure of sensitive material beyond the intended scope of the IPMI management role. The root cause is associated with CWE...

Exploit for CVE-2026-115905

zip-cloaking-scanner Detection-only triage scanner for Rus...

CVE-2026-117469

Psono Server CE & EE versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with read-only access to a file could present a download transfer to the upload endpoint, obtain a signed upload URL for an...

CVE-2026-117469

Psono Server (CE & EE) versions 1.0.0 through 7.2.3 are vulnerable to a file-transfer type confusion flaw. The software fails to enforce the correct direction of file-transfer credentials during repository operations. An authenticated remote attacker with read-only access can exploit this by pres...

CVE-2026-117469

Psono Server CE & EE versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with read-only access to a file could present a download transfer to the upload endpoint, obtain a signed upload URL for an...

CVE-2026-117469 File-transfer type confusion permits unauthorized repository writes in Psono Server

Psono Server CE & EE versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with read-only access to a file could present a download transfer to the upload endpoint, obtain a signed upload URL for an...

EUVD-2026-110603

Psono Server CE & EE versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with read-only access to a file could present a download transfer to the upload endpoint, obtain a signed upload URL for an...

CVE-2026-117469 File-transfer type confusion permits unauthorized repository writes in Psono Server

Psono Server CE & EE versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with read-only access to a file could present a download transfer to the upload endpoint, obtain a signed upload URL for an...

CVE-2026-117469 File-transfer type confusion permits unauthorized repository writes in Psono Server

Psono Server CE & EE versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with read-only access to a file could present a download transfer to the upload endpoint, obtain a signed upload URL for an...

CVE-2026-116730

A flaw was found in Furnace. This vulnerability allows an attacker to cause a Denial of Service DoS by convincing a user to open a specially crafted FamiTracker module file. The application fails to properly validate instrument note counts during file import, resulting in an out-of-bounds read th...

MeshCentral

MeshCentral Table of Contents About Social Media Documentation Video Tutorials Community Meetings Feedback Unofficial Chatrooms Archive PDFs License About MeshCentral is a full computer management web site. With MeshCentral, you can run your own web server to remotely manage and control computers...

MGASA-2026-0550 Updated perl-Imager package fixes a security vulnerability

Heap out-of-bounds read in Imager::File::GIF gifconsolidate reader ireadgiflow via crafted colour-map index. CVE-2026-112202...

Updated perl-Imager package fixes a security vulnerability

Heap out-of-bounds read in Imager::File::GIF gifconsolidate reader ireadgiflow via crafted colour-map index. CVE-2026-112202...

10Web Booster: RCE

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation and extension filtering on the pageid...