CVE-2026-95652

Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-usb-formatter allows Privilege Abuse. This issue affects pardus-usb-formatter: from 0.7.0 before 0.7.2...

CVE-2026-95652

The pardus-usb-formatter tool developed by TÜBİTAK BİLGEM Software Technologies Research Institute contains an improper device validation vulnerability (CWE-250). This flaw allows for Privilege Abuse , where the application executes with unnecessary privileges, potentially enabling unauthorized p...

EUVD-2026-117417

Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-usb-formatter allows Privilege Abuse. This issue affects pardus-usb-formatter: from 0.7.0 before 0.7.2...

CVE-2026-95652 Improper Device Validation Allows Privileged Disk Formatting in TÜBİTAK BİLGEM's pardus-usb-formatter

Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-usb-formatter allows Privilege Abuse. This issue affects pardus-usb-formatter: from 0.7.0 before 0.7.2...

CVE-2026-55368

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8, H2O's access-log formatter could write past its log-line buffer when an affected custom access-log format was configured. The allocation errors affected %errorx, %q when t...

CVE-2026-55368

The h2o HTTP server (supporting HTTP/1.x, HTTP/2, and HTTP/3) is vulnerable to a buffer overflow in its access-log formatter. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8 , a specifically configured custom access-log format could cause the formatter to write past its log-line buffer. ...

CVE-2026-55368 h2o: buffer overflow when using the %{error}x log directive

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8, H2O's access-log formatter could write past its log-line buffer when an affected custom access-log format was configured. The allocation errors affected %errorx, %q when t...

PT-2026-137202

Name of the Vulnerable Software and Affected Versions h2o versions prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8 Description The access-log formatter in the HTTP server can write past its log-line buffer when a custom access-log format is configured. This occurs due to allocation error...

[SECURITY] Fedora 43 Update: ruff-0.17.2-1.fc43

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

capability-sdk

Capability SDK Shared Go SDK for building security capabilities for the Guard platform. Packages pkg/capability - Capability Interface Defines the standardized interface that security scanners implement. Types: // Target - what a capability scans type Target struct Type TargetType // domain, ip,...

CVE-2026-114535

Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0...

CVE-2026-114531

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0...

CVE-2026-107264

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...

EUVD-2026-113572

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...

CVE-2026-107264

The Inline Formatter Field module for Drupal is vulnerable to a Server-side Template Injection (SSTI) . The root cause is the improper neutralization of special elements during template parsing, which allows attackers to render protected data or execute unsafe Twig commands . This issue affects v...

CVE-2026-107264 Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...

CVE-2026-107264 Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...

CVE-2026-114531

The Drupal Swiper formatter module (versions 0.0.0 to 2.1.2 and 3.0.1 to 3.1.0 ) contains a Stored Cross-site Scripting (XSS) vulnerability. The root cause is the failure to apply appropriate filtering to user-entered text used as part of a slide in the SwiperJs integration. The impact allows for...

CVE-2026-114531 Swiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0...

CVE-2026-114531

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0...