CVE-2026-104634

The beam_mcp library (versions 0.1.0 to before 0.10.1 ) contains an Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server . Due to a flaw in normalize_arguments/2 and to_json_value/1, JSON true , false , and null tool arguments are incorrectly converted to the strings "true" , "false"...

CVE-2025-4596: Authorization Bypass Through User-Controlled Key

Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging to other users through manipulation of GET arguments containing document IDs. This issue has been fixed in 6.09.01.62 version of ADMX...

kernel: NFSv4/pnfs: Fix a use-after-free bug in open

A flaw was found in the Linux kernel's parallel NFS pNFS client implementation. When an in-flight file open Remote Procedure Call RPC operation is cancelled, the kernel prematurely frees memory structures that remain in use by the pending request. A local user can exploit this use-after-free...

WordPress Time Sheets plugin <= 1.4.0 - Reflected Cross-Site Scripting (XSS) Vulnerability

WordPress Time Sheets plugin Reflected Cross-Site Scripting XSS Vulnerability was found in 1.4.0 version. There's a problem with sanitization with “startdate” and “enddate" GET arguments. Solution Update the plugin...