CVE-2026-19323

A security flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2e88352b59b10d3b478d678b0. Affected by this vulnerability is the function generateProjectDocs of the file src/index.ts of the component analyze-projec. The manipulation of the argument projectName results in path...

CVE-2026-19323 azer react-analyzer-mcp analyze-projec index.ts generateProjectDocs path traversal

A security flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2e88352b59b10d3b478d678b0. Affected by this vulnerability is the function generateProjectDocs of the file src/index.ts of the component analyze-projec. The manipulation of the argument projectName results in path...

PT-2026-80467

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input...

PT-2026-69258

Name of the Vulnerable Software and Affected Versions NightTrek Ollama-mcp versions up to 80cf2e17cfc144963a475b619093a2d13c13dbc9 Description A flaw in the file src/index.ts allows for command injection through the manipulation of the name, modelfile, source, or destination arguments. This issue...

PT-2026-69290

Name of the Vulnerable Software and Affected Versions Shenzhen Aitemi M300 Wi-Fi Repeater version r0-ea7890a Description A remote command injection flaw exists due to improper handling of arguments in the sprintf function within the /protocol.csp?fname=net&opt=smacfilter...

[SECURITY] [DLA 4725-1] bind9 security update

Debian LTS Advisory DLA-4725-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias August 08, 2026 https://wiki.debian.org/LTS Package : bind9 Version : 1:9.16.50-1deb11u6 1:9.18.49-1deb12u2 CVE ID : CVE-2026-3039 CVE-2026-3592 CVE-2026-5946 CVE-2026-5950 CVE-2026-1072...

CVE-2026-71957

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist.name field and execute arbitrary commands by crafting a specific...

DoS (Denial of Service) org.bouncycastle:bcprov-jdk18on Dependency in Bamboo Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 10.2.1, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

CVE-2026-71957

D-Link DWR-M961 devices (hardware version C1, software 1.1.2_C1_202602110044) contain a buffer overflow in the app.cgi interface. A remote attacker can write an overly long string to netAcc.addlist[].name to execute arbitrary commands or crash the device. Root cause: improper input handling in ap...

EUVD-2026-54809

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist.name field and execute arbitrary commands by crafting a specific...

CVE-2026-71957

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist.name field and execute arbitrary commands by crafting a specific...

CVE-2026-71957 D-Link DWR-M961 Buffer Overflow via app.cgi

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist.name field and execute arbitrary commands by crafting a specific...

Malicious code in sme-rko-finance-front-operations-tax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede42a446ab3685943424af5a5411fb93bf5961c83ccf6ce02b35b8d835c60aa On require, index.js loads platform.js and lib/telemetry.js, which download a platform-specific binary from obfuscated Cloudflare Workers hosts...

Malicious code in sme-rko-finance-front-operations-widget-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13823f2899a1bfed6b46575763e7ee2629fa4d9388130713a88125b1f38d6dae On require of this package, index.js loads compat.js, which downloads a platform-specific native binary from Cloudflare Workers subdomains under...

MAL-2026-13644 Malicious code in sme-rko-finance-front-operations-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ad5f5c931a19daf4fd3f939fc2ed4f1ef2bb034800563cd2ad687f1fbe2364 On require, index.js loads shim.js which downloads a platform-specific binary from runtime-assembled .workers.dev hostnames with a DNS TXT fallback...

MAL-2026-13653 Malicious code in sme-rko-finance-front-payment-registers-operations-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b21f700cd5e3a5eb33a34fa9e3a9754e73e5794ee1cc57ada01344004a8c921 index.js unconditionally loads runtime.js on require. runtime.js detects the host OS and architecture, then downloads an opaque platform-matched bina...

PT-2026-69223

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 software version 1.1.2 C1 202602110044 Description A buffer overflow occurs in the 'app.cgi' interface. A remote attacker can send an excessively long string to the netAcc.addlist.name field to execute...

Debian dsa-6419 : dnsdist - security update

The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6419 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6419-1 [email protected] https://www.debian.org/security/...

EulerOS 2.0 SP11 : python-idna (EulerOS-SA-2026-3144)

According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and...

EulerOS 2.0 SP11 : proftpd (EulerOS-SA-2026-3088)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : modsql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER...