44664 matches found
Security Bulletin: Vulnerabilities in Netty,jackson-databind,Angular,bootstrap,React Router,decode-uri-component,Reactor Netty,Spring WebFlux,Spring Framework,spring-web might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, jackson-databind, Angular, bootstrap, React Router, decode-uri-component, Reactor Netty, Spring WebFlux, Spring Framework,spring-web. Vulnerabilities include allowing the renamed JSON key to be assigned...
USN-8856-1 kdenlive, mlt vulnerability
It was discovered that Kdenlive allowed dangerous proxy parameters when processing attacker-controlled project files. An attacker could use this to execute arbitrary commands via the MLT framework's ante/post consumer properties...
USN-8856-1: Kdenlive, MLT vulnerability
It was discovered that Kdenlive allowed dangerous proxy parameters when processing attacker-controlled project files. An attacker could use this to execute arbitrary commands via the MLT framework's ante/post consumer properties...
Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in React Router
Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in React Router. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-33244 DESCRIPTION: React Router is a router for React. In versions 7.5.1 through 7.13.1, when using...
METIS
METIS - Modular Exploitation & Threat Intelligence Framework...
ZK Framework - Information Disclosure
ZK Framework 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 is susceptible to information disclosure. An attacker can access sensitive information via a crafted POST request to the component AuUploader and thereby possibly obtain additional sensitive information, modify data, and/or execute...
The vulnerability of the ulpi_register() function in the drivers/usb/common/ulpi.c module of the Linux operating system’s USB device driver framework allows a hacker to cause a service failure.
The vulnerability of the ulpiregister function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the re-release of previously released memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
PT-2026-104821
It was discovered that Kdenlive allowed dangerous proxy parameters when processing attacker-controlled project files. An attacker could use this to execute arbitrary commands via the MLT framework's ante/post consumer properties...
Missing sheet protection check when updating cell comments
The handler that updates a cell comment in the Vaadin Spreadsheet component did not re-check the sheet protection state, so a user of an application that renders a spreadsheet could add or replace comments on a protected sheet and on locked cells, and create empty cells in the process. See CWE-28...
CVE-2026-102316
An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=560238698 https://code.google.com/p/chromium/issues/detail?id=102316...
LARAVEL-EXPLOIT
██╗ █████╗ ██████╗ █████╗ ███████╗██╗ ██╗██████...
EUVD-2026-88743
Sliver C2 framework version 1.7.7 and earlier contains an unhandled panic vulnerability in the operator gRPC handler that allows an attacker controlling a compromised implant to crash the entire teamserver by returning a malformed or empty Download response. Attackers can send zero-length or 1-3...
USN-8729-6 linux-aws, linux-aws-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...
[SECURITY] Fedora 44 Update: perl-Dancer2-2.2.1-1.fc44
Dancer2 is the new generation of Dancer, the lightweight web-framework for Perl. It is a complete rewrite based on Moo and is meant to be easy and fun...
CLEANSTART-2026-JC43217 Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is config...
Security vulnerability affects the apache-hive package. Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through...
CLEANSTART-2026-KU24747 Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service (DoS) attack
Security vulnerability affects the apache-hive package. Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service DoS attack...
CLEANSTART-2026-QT13587 Tornado is a Python web framework and asynchronous networking library
CVE-2026-82397 affects multiple packages. Tornado is a Python web framework and asynchronous networking library. See references for individual vulnerability details...
CLEANSTART-2026-MW15719 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...
CLEANSTART-2026-IP93838 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...
CLEANSTART-2026-DP99437 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...