EUVD-2026-97586

Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/id/fork on chats th...

CVE-2026-109284

Open WebUI versions 0.11.0 before 0.11.4 are vulnerable to an improper authorization flaw in the chat fork handler. The application fails to verify folder write permissions when placing forked chats into a source chat's folder. Specifically, shared folder members who have been downgraded to read-...

CVE-2026-109284 Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint

Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/id/fork on chats th...

CVE-2026-109390

AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload...

CVE-2026-109390

AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload...

CVE-2026-109390

AnyDesk versions prior to 8.0.3 are vulnerable to a heap-based buffer overflow that allows unauthenticated remote attackers to execute arbitrary code. The root cause is a failure to validate a payload length value within the stream packet handler for mode 5 in the session protocol. On Linux syste...

EUVD-2026-97471

AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload...

CVE-2026-108890

A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager.spawn of the file packages/server/src/browser-handlers/terminal-handler.ts of the component Terminal Handler. The manipulation of the argument cwd leads to...

CVE-2026-108894

A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a manipulation of the argument...

EUVD-2026-97436

A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a manipulation of the argument...

CVE-2026-108894

A security flaw in the Linksys E1700 (version 1.0.0.4.003) allows for OS command injection due to improper neutralization of special elements in the Static Route Handler component. Specifically, manipulating the staticRoute_IP_setting, staticRoute_Netmask_setting, staticRoute_Gateway_setting, or ...

CVE-2026-108894 Linksys E1700 Static Route addStaticRoute os command injection

A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a manipulation of the argument...

CVE-2026-108834

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

CVE-2026-108890 BlackBeltTechnology pi-agent-dashboard Terminal terminal-handler.ts terminalManager.spawn improper authorization

A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager.spawn of the file packages/server/src/browser-handlers/terminal-handler.ts of the component Terminal Handler. The manipulation of the argument cwd leads to...

CVE-2026-108890 BlackBeltTechnology pi-agent-dashboard Terminal terminal-handler.ts terminalManager.spawn improper authorization

A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager.spawn of the file packages/server/src/browser-handlers/terminal-handler.ts of the component Terminal Handler. The manipulation of the argument cwd leads to...

CVE-2026-108890

A vulnerability exists in BlackBeltTechnology pi-agent-dashboard (versions up to 0.8.0 ) within the Terminal Handler component. Specifically, the terminalManager.spawn function in packages/server/src/browser-handlers/terminal-handler.ts is susceptible to improper authorization due to the manipula...

regreSSHion

Qualys Security Advisory regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems CVE-2024-6387 ======================================================================== Contents Summary SSH-2.0-OpenSSH3.4p1 Debian 1:3.4p1-1.woody.3 Debian 3.0r6, from 2005 Theory Practice Timing...

CVE-2024-6387

CVE-2024-6387 a signal handler race condition in OpenSSH's server sshd Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe...

majordomo-CVE-2026-27174-poc

majordomo-CVE-2026-27174-poc A proof-of-concept exploiting an unauthenticated remote code execution via the admin panel's PHP console feature in MajorDomo Major Domestic Module. Vulnerability MajorDoMo's admin panel exposes a PHP evaluation console via /admin.php. Due to a missing exit after an...

rootkit-signal-hunter

Rootkit Signal Hunter Detect Linux rootkits which use signals to elevate process privileges. Some rootkits install signal handlers which listen for specific signals to elevate privileges. This tool can identify these rootkits by sending signals and observing UID switching to root. Optionally spaw...