CVE-2026-12923 Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter

The Youtube Showcase plugin for WordPress is vulnerable to Arbitrary Function Call in versions up to and including 4.0.3. This is due to insufficient validation of the 'path' parameter in the emddeletefile AJAX handler in includes/common-functions.php. The user-supplied value is passed through...

CVE-2026-12923 Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter

The Youtube Showcase plugin for WordPress is vulnerable to Arbitrary Function Call in versions up to and including 4.0.3. This is due to insufficient validation of the 'path' parameter in the emddeletefile AJAX handler in includes/common-functions.php. The user-supplied value is passed through...

CVE-2026-44041 UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated

UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte conversion helper. In rfb/dh.cpp:204, the vncWc2Mb function passes a caller-supplied WCHAR pointer to wcslen before any bounds check. If the caller provides a wide-character buffer that is not properly...

EUVD-2026-40438

Capgo before 12.128.2 contains an information disclosure vulnerability in the public.inviteusertoorg RPC function that allows unauthenticated attackers to enumerate organization existence by observing distinct error responses. Attackers can call the SECURITY DEFINER function with a publishable AP...

EUVD-2026-40863

An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to execute arbitrary code via the register function in inc/auth.php...

CVE-2026-54502

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.dump is vulnerable to a stack-based buffer overflow when a large :indent value is provided by the developer. fillindent in dump.h calls memsetindentstr, ' ', sizetopts-indent without...

PT-2026-54609

Name of the Vulnerable Software and Affected Versions NVIDIA ConnectX affected versions not specified NVIDIA BlueField affected versions not specified Description A flaw exists in the command interface that allows a local user with virtual function VF access to trigger a write out of bounds by...

PT-2026-54470

The Youtube Showcase plugin for WordPress is vulnerable to Arbitrary Function Call in versions up to and including 4.0.3. This is due to insufficient validation of the 'path' parameter in the emd delete file AJAX handler in includes/common-functions.php. The user-supplied value is passed through...

PT-2026-54608

Name of the Vulnerable Software and Affected Versions NVIDIA ConnectX affected versions not specified NVIDIA BlueField affected versions not specified Description A flaw exists in the command interface of the device reachable from a Virtual Function VF context. A local user with VF privileges, su...

Antaeus: Hunting Repository-Level Logic Vulnerabilities Via Context-Grounded LLM Reasoning

LLM-based vulnerability detectors have shown promising results in identifying memory-safety bugs and vulnerability classes whose violations can often be expressed through established security properties. Logic vulnerabilities, however, pose a different challenge, as their identification requires...

CVE-2026-36910

An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

PT-2026-54916

Name of the Vulnerable Software and Affected Versions JAIOTlink C492A-W6 version 4.8.30.57701411 Description Authenticated attackers can achieve persistent remote code execution by writing arbitrary shell scripts to the writable persistent JFFS2 storage path. The execution is triggered through an...

The vulnerability of the xmlHTMLPrintFileContext() function in the xmllint component of the Libxml2 library allows a attacker to disclose confidential information or enhance their privileges.

The vulnerability of the xmlHTMLPrintFileContext function in the xmllint component of the Libxml2 library is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to disclose confidential information or gain elevated privileges...

The vulnerability of the __dead_end_function() function in the tools/objtool/check.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the deadendfunction function in the tools/objtool/check.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of NETAMS WNAM user management software lies in the lack of authentication for a critical function, allowing an intruder to gain unauthorized access to the system.

The vulnerability of NETAMS WNAM wireless network user management software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to the system’s web interface with administrator privilege...

The vulnerability of the indx_read() function in the fs/ntfs3/index.c module of the NTFS file system in the Linux kernel allows a attacker to access protected information or cause service interruptions.

The vulnerability of the indxread function in the fs/ntfs3/index.c module of the NTFS file system in the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

PT-2026-54749

Name of the Vulnerable Software and Affected Versions Guardian language-system affected versions not specified Description An unauthenticated remote attacker can execute arbitrary OS commands on the server. The issue occurs because the speech text.php file passes the id GET parameter directly int...

PT-2026-54929

Name of the Vulnerable Software and Affected Versions FatFs versions R0.16 and earlier Description A stack-based buffer overflow occurs in the f getlabel function. This issue arises because the exFAT label length XDIR NumLabel is trusted without enforcing the maximum limits defined by the...

CVE-2025-23351: Out-of-bounds Write

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function VF access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device...

CVE-2026-12923: Improper Control of Filename for Include/Require Statement in PHP Program

The Youtube Showcase plugin for WordPress is vulnerable to Arbitrary Function Call in versions up to and including 4.0.3. This is due to insufficient validation of the 'path' parameter in the emddeletefile AJAX handler in includes/common-functions.php. The user-supplied value is passed through...