CVE-2026-64943 Apache Answer: API keys logged in plaintext during authentication

Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Full API keys are written to application logs on every authenticated request, allowing anyone with log-read access to recover and replay active bearer credentials. Use...

CVE-2026-64943 Apache Answer: API keys logged in plaintext during authentication

Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Full API keys are written to application logs on every authenticated request, allowing anyone with log-read access to recover and replay active bearer credentials. Use...

CVE-2026-111398

The WordPress MapSVG plugin (versions

CVE-2026-111398 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.16.1...

CVE-2026-111398 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.16.1...

CVE-2026-111406 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1...

CVE-2026-111406

The MapSVG WordPress plugin (versions

CVE-2026-111406 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1...

Exploit for Improper Input Validation in Paloaltonetworks Pan-Os

CVE-2024-3400: Vulnerability Analysis, Patch Management, Cyber...

wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash

A flaw in Wireshark's C12.22 protocol dissector allows remote attackers to trigger a Denial of Service DoS. By sending a specially crafted network packet or capture file, an attacker can crash the application, disrupting network analysis capabilities...

Astra Linux – vulnerability in GIMP

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability enables remote attackers to execute arbitrary code on affected installations of GIMP. Exploitation requires user interaction, as the target must visit a malicious page or open a malicious file...

Astra Linux – vulnerability in sshfs-fuse

SSHFS is a network filesystem client used to connect to SSH servers. Prior to version 3.7.6, a malicious SFTP server could return absolute or relative symlink targets containing parent-directory components; SSHFS then uses FUSE to resolve these targets via the client kernel’s access to the local...

Astra Linux – vulnerability in libhttp-daemon-perl

HTTP::Daemon versions prior to 6.17 for Perl allow OS command injection via sendfile. sendfile opens its string argument using Perl’s two-argument open mechanism. The two-argument form interprets special prefixes: ‘| cmd’ and ‘cmd |’ open a pipe to a subprocess; ‘ path’ and ‘ path’ open the...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access before closing files opened by openexec bmregisterwrite opens an executable file using openexec, which internally calls doopenexecat and denies write access to the file to prevent modifications...

Astra Linux - vulnerability in requests

Requests is an HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function used a predictable filename when extracting files from zip archives into the system’s temporary directory. If the target file already existed, it was reused without any validation. A local...

Astra Linux – vulnerability in vim

Vim is an open source, command line text editor. Prior to version 9.1.2132, there was a heap buffer overflow vulnerability in Vim’s tag file resolution logic when processing the ‘helpfile’ option. The vulnerability resides in the gettagfname function within src/tag.c. When handling tags from help...

Astra Linux – vulnerability in libstb, libsixel

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

Astra Linux – vulnerability in Firefox and Thunderbird

Mitigation bypass in the File Handling component. This vulnerability has been fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential OOB in getfileallinfo for compound requests When a compound request consists of QUERYDIRECTORY + QUERYINFO FILEALLINFORMATION, and the first command consumes nearly the entire maxtranssize, getfileallinfo wou...

Astra Linux – vulnerability in Apache2

The Use After Free vulnerability in the modhttp2 module of the Apache HTTP Server occurs when file handles have already been exhausted. This issue affects Apache HTTP Server versions 2.4.55 through 2.4.67...