CVE-2026-53594 FreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted Path

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's Manage - Logs - App Logs feature uses the bundled rap2hpoutre/laravel-log-viewer override to decrypt a user-supplied file identifier and then pass the resolved path to Laravel's download response. Prior...

CVE-2026-51541

OpENer 2.3.0 commit 76b95cf has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An attacker can send a valid ENIP SendRRData frame carrying a very short CIP payload whose pathsize field claims that many more path words are...

CVE-2026-51541

OpENer version 2.3.0 (commit 76b95cf) contains an out-of-bounds read vulnerability during CIP message parsing . The flaw exists when handling malformed explicit requests where an attacker provides a forged EPath size . By sending a valid ENIP SendRRData frame with a short CIP payload but a large ...

PT-2026-57879

Name of the Vulnerable Software and Affected Versions OpENer version 2.3.0 Description An out-of-bounds read occurs during CIP Common Industrial Protocol message parsing when processing malformed explicit requests. An attacker can send a valid ENIP SendRRData frame containing a short CIP payload...

CVE-2026-51541

OpENer 2.3.0 commit 76b95cf has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An attacker can send a valid ENIP SendRRData frame carrying a very short CIP payload whose pathsize field claims that many more path words are...

Apache Solr 安全漏洞

Apache Solr is the United States Apache Apache Foundation of a search server based on Lucene a full-text search engine. The product supports level search , vertical search , highlighting search results and so on. An authentication error vulnerability exists in Apache Solr that stems from the...

Envoy 输入验证错误漏洞

Envoy is an open source distributed proxy server. Envoy suffers from an input validation error vulnerability that stems from the possibility that a client could bypass JSON Web Token JWT checks and forge a forged original path...