CRM Platform Path Traversal DoS

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

YouGile Project Management Service Unauthorized Access

The vulnerability of the YouGile project management service is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Bestechnic BES2300 Bluetooth Audio SoC Buffer Overflow DoS

The vulnerability of the l2caphandledata function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially...

Test IT SSRF

The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

Mlflow < 2.11.0 - Path Traversal

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0250...

Travelpayouts <= 1.1.16 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the travelpayoutsredirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0337...

CVE-2025-57833

Django FilteredRelation Alias SQL Injection Vulnerability CVE-2025-57833 A SQL injection vulnerability in Django that emerged after about a year, at first glance it appears to be caused by an alias since aliases cannot be precompiled. This vulnerability affects the FilteredRelation feature in the...

CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - Unauthenticated Arbitrary File Upload Description: The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbtinsertImageNew' function in versions up to, and including, 3.0.0. This...

CVE-2026-126733

This module enables you to sell licenses such as roles or files using Drupal Commerce. The module doesn't sufficiently validate license order items, which under certain conditions could allow a customer to obtain a license without paying its full price. This vulnerability is mitigated by the fact...

CVE-2026-126732

This module enables you to sell licenses that grant access to resources such as roles through Drupal Commerce. The module doesn't sufficiently validate the license referenced by an order item, allowing an attacker to take over another user's license. This vulnerability is mitigated by the fact th...

DRUPAL-CONTRIB-2026-324

This module enables you to sell licenses such as roles or files using Drupal Commerce. The module doesn't sufficiently validate license order items, which under certain conditions could allow a customer to obtain a license without paying its full price. This vulnerability is mitigated by the fact...

Security Bulletin: IBM Planning Analytics Local is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics Local is affected by security vulnerabilities. These vulnerabilities have been addressed in IBM Planning Analytics Local Vulnerability Details CVEID:CVE-2026-41696 DESCRIPTION: Spring Data MongoDB repository query method...

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability Exploit Author: ugurkarakoc Vendor Homepage https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Software Link https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Overview...

CVE-2023-33253

CVE-2023-33253 LabCollector 6.0 though 6.15 allows remote code execution An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file such as...

chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513948227...

chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496526419...

chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520571816...

chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501483855...

chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516915337...