PT-2026-95635

Name of the Vulnerable Software and Affected Versions cockpit-files affected versions not specified Description A timing issue, known as a symlink race condition, exists during privileged file operations such as changing file ownership or permissions. A local attacker can manipulate directory...

CVE-2025-33141: Exposure of Sensitive System Information to an Unauthorized Control Sphere

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment...

Malicious code in aiosendletter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29baa6f2cbfb2ef9907be7830505e33e82b5a1e6a45eb7f995022d09f5841f09 The package advertises itself as a 'safe bug reporter' but its init function archives the contents of %LOCALAPPDATA%\logs with shutil.makearchive and...

MAL-2026-16264 Malicious code in aiosendletter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29baa6f2cbfb2ef9907be7830505e33e82b5a1e6a45eb7f995022d09f5841f09 The package advertises itself as a 'safe bug reporter' but its init function archives the contents of %LOCALAPPDATA%\logs with shutil.makearchive and...

CVE-2026-93051

In the Linux kernel, the following vulnerability has been resolved: misc: ad525xdpot: use driver core groups for sysfs files addpotprobe creates per-RDAC sysfs files manually and then optionally creates the command sysfs group. This leaves probe responsible for rolling back partial sysfs state an...

AZL-101948 CVE-2026-93051 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: misc: ad525xdpot: use driver core groups for sysfs files addpotprobe creates per-RDAC sysfs files manually and then optionally creates the command sysfs group. This leaves probe responsible for rolling back partial sysfs state an...

EUVD-2026-52282

Grav: Path Traversal in ImageMedium::watermark — arbitrary file disclosure via publicly-cached images...

CVE-2026-93051

This vulnerability affects the ad525x_dpot driver (I2C and SPI) in the Linux kernel's misc subsystem. The root cause is that ad_dpot_probe() manually created per-RDAC sysfs files, making probe responsible for rolling back partial sysfs state on failure and the remove callback responsible for matc...

Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files

A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...

Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files

A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...

Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files

A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...

MAL-2026-16250 Malicious code in marketing-mcp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87216e00fe68e2de8b140f1f9ffc2db5a8e814f38030e2eb6120c9ae9e7ca3ff The package exposes an MCP tool sendpath that reads a caller-specified local file and POSTs its contents to a hardcoded...

Improper Handling of Case Sensitivity

Overview @fastify/static is a Plugin for serving static files as fast as possible. Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via the route matching process. An attacker can access protected files by altering the letter case of a path segment in a...

PT-2026-94171

Name of the Vulnerable Software and Affected Versions wpShopGermany IT-RECHT KANZLEI versions prior to 2.4 Description The plugin fails to generate API authentication tokens securely. The token is derived from data controlled by the requester and is created as a side effect of the validation chec...

CVE-2026-92985: Improper Neutralization of Input During Web Page Generation

SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree. Attackers can craft malicious .sy notebook files with unescaped HTML in bookmark attributes that execute scripts in the Electron renderer with access to childprocess for...

PT-2026-95149

Name of the Vulnerable Software and Affected Versions AI Agent Automation versions prior to 0.9.1 Description An authenticated user capable of creating or modifying workflow file steps can exploit a path traversal flaw in the executeStep file-step implementation located in...

PT-2026-95078

Name of the Vulnerable Software and Affected Versions SAIL versions prior to 1.0.0 Description A heap overwrite occurs in the sail codec load frame v8 xbm function within src/sail-codecs/xbm/xbm.c when processing X10 static short files. The issue arises because the decoded pixel buffer is allocat...

PT-2026-94250

Name of the Vulnerable Software and Affected Versions admin3 version 3.0.0 Description The upload handler fails to sanitize client-supplied filenames on Windows deployments. This allows authenticated users to use dot-dot path segments in filenames to escape the configured storage directory and...

PT-2026-94335

Name of the Vulnerable Software and Affected Versions HUBzero CMS versions prior to 2.2.33 Description A path traversal issue exists in project file upload handlers. This allows authenticated project members to write arbitrary files outside the project repository by supplying traversal sequences ...

PT-2026-95089

Name of the Vulnerable Software and Affected Versions Wavelog versions 1.8 through 2.4.1 Description Wavelog exposes the endpoints '/install/ajax.php' and '/install/includes/interface assets/triggers.php' after installation without requiring an installation lock or permission check. Unsanitized...