CVE-2026-52189

A Buffer Overflow vulnerability exists in the gohead/sub_487330 component of UTT nv518G nv518GV3v3.2.7-210919-161313 . This flaw allows a remote attacker to trigger a denial of service (DoS) by providing more data than the memory block can hold, potentially crashing the system. While exploitation...

ROS-20260702-73-0026

The vulnerability of the pprget function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sctp_sched_prio_free_sid() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the sctpschedpriofreesid function in Linux operating systems is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dec_valid_node_count() function in the fs/f2fs/f2fs.h module of the F2FS file system support for Linux kernel allows a malicious actor to cause a service failure.

The vulnerability of the decvalidnodecount function in the fs/f2fs/f2fs.h module of the F2FS file system support for Linux operating systems is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the JavaScript function in the Protocol Buffers (Protobuf) library called protobufjs, which allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript function in the Protocol Buffers Protobuf library, called protobufjs, is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the sub_400E40() function in the setconf.cgi script of the D-Link DCS-935L wireless HD camera software allows a intruder to execute arbitrary commands.

The vulnerability of the sub400E40 function in the setconf.cgi script of the D-Link DCS-935L wireless HD camera software is related to the failure to eliminate special elements during the processing of the UID parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

PT-2026-55290

Name of the Vulnerable Software and Affected Versions LobeChat versions prior to 2.2.10-canary.15 Description An authenticated attacker can cause a regular expression denial of service ReDoS by providing a catastrophic-backtracking pattern in a GitHub repository URL path during skill import. This...

The vulnerability of the Portainer container management platform’s customTemplateFile() function allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Portainer container management platform’s customTemplateFile function is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability in the cacti_unserialize() function of the Cacti monitoring software’s managers.php file allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cactiunserialize function in the managers.php file of the Cacti monitoring software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerabilities of the functions crypto_aegis128_aesni_process_crypt() and crypto_aegis128_aesni_setauthsize() in the arch/x86/crypto/aegis128-aesni-glue.c module allow a attacker to cause a service failure under Linux’s x86 kernel support.

The vulnerabilities of the functions cryptoaegis128aesniprocesscrypt and cryptoaegis128aesnisetauthsize in the arch/x86/crypto/aegis128-aesni-glue.c module are related to the lack of code validation during function calls. Exploiting these vulnerabilities can allow an attacker to cause a service...

PT-2026-54951

Name of the Vulnerable Software and Affected Versions Database for Contact Form 7, WPforms, Elementor forms versions prior to 1.5.2 Description An arbitrary file copy issue exists in the create entry el function. The function retrieves the raw value from the Elementor Pro Form Record object for...

SUSE SLED15 / SLES15 Security Update : perl-Config-IniFiles (SUSE-SU-2026:2710-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2710-1 advisory. This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrit...

CVE-2026-55792 Craft CMS: Sensitive File Disclosure / Server-Side File Read

Craft CMS is a content management system CMS. In versions starting from 4.0.0-RC1 and prior to 4.18.0, and 5.0.0-RC1 and above, prior to 5.10.0, the dataUrl Twig function is included in Craft’s Twig sandbox allowlist, allowing any control panel user granted the utility:system-messages permission ...

CVE-2026-55792 Craft CMS: Sensitive File Disclosure / Server-Side File Read

Craft CMS is a content management system CMS. In versions starting from 4.0.0-RC1 and prior to 4.18.0, and 5.0.0-RC1 and above, prior to 5.10.0, the dataUrl Twig function is included in Craft’s Twig sandbox allowlist, allowing any control panel user granted the utility:system-messages permission ...

CVE-2026-55792

Craft CMS is vulnerable in versions 4.0.0-RC1 through 4.17.x and 5.0.0-RC1 through 5.9.x due to dataUrl() being in the Twig sandbox allowlist. A control panel user with the utility:system-messages permission can embed a file-reading payload in system emails, causing the server to read targeted fi...

EUVD-2026-41138

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to 4.12.26 are vulnerable to Prototype Pollution through Jodit.modules.Helpers.setchain, value, obj, which walks the dot-separated chain, creating and following each path segment...

CVE-2026-55886

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to 4.12.26 are vulnerable to Prototype Pollution through Jodit.modules.Helpers.setchain, value, obj, which walks the dot-separated chain, creating and following each path segment...

vim: arbitrary command execution via modeline sandbox bypass

A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the complete, guitabtooltip, printheader options and the mapset function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution...

vim: arbitrary command execution via modeline sandbox bypass

A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the complete, guitabtooltip, printheader options and the mapset function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution...

CVE-2026-58592 Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM Integration

Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader. When a JavaScript function is imported into a WebAssembly module via the ESM path, WebAssemblyModule.cpp passes a stack-local Wasm::FunctionType by reference to...