PT-2026-106297

A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the...

PT-2026-107219

Name of the Vulnerable Software and Affected Versions Apache Commons BCEL versions prior to 6.13.0 Description BCEL caches attacker-controlled classes under their self-declared names without validating the requested name. This allows subsequent lookups and name-keyed verification results to refer...

PT-2026-107163

Uncaught Exception CWE-248 in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations including Chinese, Japanese, and Korean locales on Windows, an unhandle...

EUVD-2025-211038

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

PT-2026-106820

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

Linux Distros Unpatched Vulnerability : CVE-2026-104041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch NSS responder. Becau...

Linux Distros Unpatched Vulnerability : CVE-2026-104043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a...

GHSA-G2V6-RQMX-R4W6 @vue/server-renderer: XSS via missing CR in attribute-name blacklist

Description @vue/server-renderer was investigated specifically because it's the one place in Vue where template rendering output becomes a real HTTP response body -- a genuine server-side trust boundary, unlike client-side rendering which only ever affects the same browser session that's already...

@vue/server-renderer: XSS via missing CR in attribute-name blacklist

Description @vue/server-renderer was investigated specifically because it's the one place in Vue where template rendering output becomes a real HTTP response body -- a genuine server-side trust boundary, unlike client-side rendering which only ever affects the same browser session that's already...

GHSA-GXM5-99CW-XJW9 @fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

Impact @fastify/busboy 3.2.1 and earlier retains a bare carriage return or line feed inside the parsed Content-Disposition parameters returned to the application. The multipart header parser ends a header line only on the two-byte \r\n sequence, so a lone CR or LF embedded in a part header is...

@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

Impact @fastify/busboy 3.2.1 and earlier retains a bare carriage return or line feed inside the parsed Content-Disposition parameters returned to the application. The multipart header parser ends a header line only on the two-byte \r\n sequence, so a lone CR or LF embedded in a part header is...

CVE-2023-49539

CVE-2023-49539 Book Store Management System v1.0 - ثغرة البرمجة النصية عبر المواقع XSS في "index.php/category" - الحقل المعرض للخطر: "اسم الفئة" الوصف : تم اكتشاف أن نظام إدارة المكتبات Book Store Management System v1.0 يحتوي على ثغرة من نوع البرمجة النصية عبر المواقع XSS في...

CVE-2026-95165

Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...

cve-2025-11142-axis-mediaclip-rce

CVE-2025-11142 — Injection de commandes OS dans mediaclip.cgi d'AXIS Étude technique n-day et PoC — analyse technique post-correctif d'une vulnérabilité d'injection de commandes OS de score CVSS 7.1 dans l'API VAPIX Media Clip d'AXIS, redécouverte indépendamment et vérifiée par des tests en boîte...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - ثغرة البرمجة النصية عبر المواقع XSS في المعامل "name" في "addnewparent" الوصف : ثغرة برمجة نصية عبر المواقع XSS في المكوّن "addnewparent" في School Fees Management System 1.0 تتيح للمهاجمين تنفيذ نصوص برمجية عشوائية أو HTML من خلال حمولة ضارة يت...

netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

A flaw was found in Netty. Netty's DNS Domain Name System codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the...

CVE-2022-26923

CVE-2022-26923 Comme décrit par Tenable : vulnérabilité d'élévation de privilèges dans Active Directory Domain Services CVSS v3 Score de base : 8.8 Vecteur : CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Sévérité : Élevée Résumé : CVE-2022-26923 exploite une vulnérabilité dans les services de...

CVE-2026-104956

Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts groupby and subgroupby query parameters and passes them without an allowlist to grouped paginators, where they are used as ORM field names by Ffield, .valuesfield, .orderbyfield, an...

CVE-2026-104956

The open-source project management tool Plane is vulnerable to unauthenticated ORM field-name injection in versions prior to 1.4.0 . The public issues endpoint fails to validate the group_by and sub_group_by query parameters, passing them directly to grouped paginators. Attackers can supply arbit...

CVE-2026-104956 Plane: Unauthenticated ORM field-name injection via `group_by`/`sub_group_by` on public deploy boards (DoS + blind oracle)

Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts groupby and subgroupby query parameters and passes them without an allowlist to grouped paginators, where they are used as ORM field names by Ffield, .valuesfield, .orderbyfield, an...