CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

Blackash-CVE-2025-48593

🚨 CVE-2025-48593 Zero-Click Remote Code Execution in Android System 🚨 "A single malicious packet can own your device." — Android Security Team, Nov 2025 🎯 Vulnerability Snapshot Attribute| Details ---|--- CVE ID| CVE-2025-48593 Severity| 🔴 Critical RCE, Zero-Click CVSS Est.| 9.8 Pending NVD...

CVE-2025-70828

CVE-2025-70828 Summary An arbitrary file read vulnerability was discovered in Datart v1.0.0-rc.3. The application fails to properly validate the JDBC connection URL during data source configuration. Vulnerability Details Vulnerability Type: Improper Input Validation CWE-20 / Arbitrary File Read...

CVE-2025-65640

CVE-2025-65640 1. Vulnerability Information CVE ID: CVE-2025-65640 Currently RESERVED Vulnerability Type: Stored Cross-Site Scripting XSS CVSSv3 score: 6.3 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N Vendor: Arket/Bluenext S.r.l. Product: Globe Document Intelligence Affected Version: 5.0.0.559 Discoverer...

POC-CVE-2026-19679

CVE-2026-19679 — 업로드된 파일 이름의 불충분한 무해화 입력 검증 상태: CONFIRMED — 6.7.2-14.el9 랩에서 확인됨2026-08-20. tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml"이 포함된 POST /rest/auditFile 요청은 HTTP 200을 반환하고 AuditFile 1000002를 등록했습니다 — 셸 메타문자가 포함된 파일 이름이 검증을 통과하여 종단 간end-to-end 저장되었습니다. 6.9.0에서는 동일한 요청이...

CVE-2026-105782

Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scrapy/spidermiddlewares/referer.py treated a Referrer-Policy response-header value that resembled a Python import path as a referrer policy class, imported the referenced object,...

PT-2026-107272

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.6.17 Description The @backstage/plugin-proxy-backend package contains improper input validation within the proxy-backend. An authenticated user can craft a request URL that forces the proxy-backend to forward the...

CVE-2026-106353: Improper Input Validation

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: Low...

PT-2026-106713

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

PT-2026-107332

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...

PT-2026-107333

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command 'Code Injection' related to improper input validation...

PT-2026-107248

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-sentry versions 0.3.0 through 0.3.7 Description Improper input validation in sentry scaffolder actions allows an authenticated internal user to force the backend to contact unintended destinations...

CVE-2026-106263: Improper Input Validation

Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

PT-2026-107279

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.17.8 Description The @backstage/backend-defaults package contains improper input validation within cloud storage URL readers. An attacker possessing write access to a cloud storage bucket utilized by the framework...

PT-2026-107271

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 2.2.4 Description The @backstage/plugin-techdocs-backend package contains improper input validation during static content requests. When the Azure Blob Storage provider is utilized and entity-level permissions are...

PT-2026-106746

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...

Cisco ASA Stack-based Buffer Overflow (CVE-2021-1573)

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...

PT-2026-107303

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package contains improper input validation regarding the ordering of scaffolder task lists. An authenticated user with permissions to create and read...

PT-2026-106860

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in Viz allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. Recommendations...

PT-2026-106881

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...