111721 matches found
MAL-2026-13473 Malicious code in alphalend-layouts (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddd94a1329de9e53295705e2344e18fc7c3620804cbb3cda3c81e7ba0e7727e The package harvests installer-side secrets and uploads them to an attacker-controlled GitHub repository, executing both when pip install...
EUVD-2026-54086
@fastify/static before version 10.1.3 contains an incomplete fix for a previous route guard bypass. The static file handler rejected only parent directory segments, but it did not canonicalize dot segments, duplicate slashes, encoded dots, or backslashes before route matching and before delegatin...
EUVD-2026-53936
OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query parameter alongside an absolute path, bypassi...
CVE-2026-53976 OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter
OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query parameter alongside an absolute path, bypassi...
WordPress Instant Appointment CVE-2026-15282 Detect
Detects Instant Appointment = 1.2 vulnerable to CVE-2026-15282: unauthenticated addservicefront AJAX writes arbitrary files via filegetcontentsimageurl + fileputcontentsimagename. Fixed in .... !/usr/bin/env python3 -- coding: utf-8 -- """Detect Instant Appointment CVE-2026-15282 = 1.2...
MAL-2026-13422 Malicious code in beautiful-ui-monitoring (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca55a4e9c07b4e285b702c515ae40bba4c641662d4513f2e26cb99e111cd3101 [email protected] advertises itself as a UI package description 'creates a beautiful ui design', keywords c/gcc/native but ships no UI...
libXfont2: libXfont2: arbitrary code execution via heap buffer overflow in ComputeScaledProperties
A flaw was found in libXfont2. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by providing a specially crafted Portable Compiled Format PCF font file. Due to missing bounds checks when processing font properties in the...
libXfont2: libXfont2: arbitrary code execution via heap buffer overflow in ComputeScaledProperties
A flaw was found in libXfont2. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by providing a specially crafted Portable Compiled Format PCF font file. Due to missing bounds checks when processing font properties in the...
libXfont2: libXfont2: arbitrary code execution via heap buffer overflow in ComputeScaledProperties
A flaw was found in libXfont2. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by providing a specially crafted Portable Compiled Format PCF font file. Due to missing bounds checks when processing font properties in the...
CVE-2026-18597
The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure...
CVE-2026-18597 Blind SSRF on Foxit PDF Services API
The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure...
CVE-2026-0637
When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without sufficient validation or sanitization of the property values. A malicious actor with access to the 'wso2carbon' log files could retrieve sensiti...
CVE-2026-19009 TinyAGI Message API Endpoint response.ts collectFiles file inclusion
A weakness has been identified in TinyAGI 0.0.20. This issue affects the function collectFiles of the file packages/core/src/response.ts of the component Message API Endpoint. This manipulation causes file inclusion. The attack can be initiated remotely. The exploit has been made available to the...
CVE-2026-16054
The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that is the only control gating its file-deletion routine, allowing anonymous attackers to delete files staged in its upload directory and...
EUVD-2026-53722
The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that is the only control gating its file-deletion routine, allowing anonymous attackers to delete files staged in its upload directory and...
EUVD-2026-53676
H5Zfilterfletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a sizet underflow. This allows attackers to cause a denial o...
UBUNTU-CVE-2026-19027
The H5Znbitdecompressonebyte, H5Znbitdecompressonenooptype, and H5Znbitdecompressoneatomic functions in H5Znbit.c in HDF5 prior to 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the buffer's actual size. This allows attackers to cause an out-of-bounds heap...
PT-2026-68415
Name of the Vulnerable Software and Affected Versions TinyAGI version 0.0.20 Description A remote file inclusion issue exists in the buildSystemPrompt function within the packages/server/src/routes/agents.ts file. This allows a remote attacker to include arbitrary files through manipulation of th...
PT-2026-68978
Impact Public frontend forms did not enforce the file upload restrictions that the Control Panel enforces, so an unauthenticated visitor could upload file types an administrator had intended to disallow through a form's assets or files field. For assets fields, files could be stored on a public,...
PT-2026-68771
Name of the Vulnerable Software and Affected Versions Anki versions prior to 25.09.3 Description Endpoints in the local HTTP server do not adequately constrain requested media and built-in data paths. This allows scripts served from shared decks, or malicious websites using an origin-check bypass...