CVE-2026-119672: MongoDB Database Tools: MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output destination for get_id when…

MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output destination for getid when --local is not specified. A user who can modify the file metadata can set the stored filename to '-', causing a later authorized retrieval to write the file contents to standard outpu...

Coldai Aono FastAPI code generator improper output handling vulnerability

Versions of Koudai Aono FastAPI Generator prior to 0.8.1 contain a security vulnerability. This vulnerability arises because the generator fails to escape embedded quotes when inserting additional response status code keys into the responses route decorator dictionary. Attackers can exploit this ...

Coldai Aono FastAPI code generator improper output handling vulnerability

Versions of Koudai Aono FastAPI Code Generator prior to 0.8.1 contain a security vulnerability. This vulnerability arises from the failure to escape embedded triple quotes when inserting them into the generated route-handler docstring via Operation.summary. An attacker can manipulate the operatio...

Coldai Aono FastAPI code generator improper output handling vulnerability

A security vulnerability exists in Koudai Aono FastAPI code generator versions prior to 0.8.1. This vulnerability arises because the generator fails to escape quotes within OpenAPI paths, inserting them into the @app.get route decorator string. As a result, attackers can inject Python expressions...

CVE-2026-116648: Tanium Discover: Tanium addressed an improper output sanitization vulnerability in Discover.

Tanium addressed an improper output sanitization vulnerability in Discover...

Security update for python-sqlparse

This update for python-sqlparse fixes the following issue: CVE-2026-112307: arbitrary code execution via unescaped PHP output formatting bsc1286096. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

SUSE-SU-2026:5042-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issue: - CVE-2026-112307: arbitrary code execution via unescaped PHP output formatting bsc1286096...

Astra Linux – vulnerability in Chromium

Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftobjref: validate objref and objrefmap expressions Referring to a synproxy stateful object from the OUTPUT hook causes a kernel crash due to infinite recursive calls: BUG: The TASK stack guard page was hit at...

CVE-2026-102801

The Users Anywhere extension for Joomla (versions prior to 3.0.1 ) is vulnerable to the exposure of sensitive information (usernames and email addresses). The root cause is that attributes supplied within {user} or [email] / [username] tags can override global plugin settings. For instance, using...

EUVD-2026-115175

Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla 3.0.1 - An administrator can disable output of user email addresses or usernames in Users Anywhere. In affected code, attributes supplied inside a user or email /...

CVE-2026-102801 Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1

Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla 3.0.1 - An administrator can disable output of user email addresses or usernames in Users Anywhere. In affected code, attributes supplied inside a user or email /...

CVE-2026-18800

When an Event Publisher output adapter is configured with properties that are irrelevant to its function, the affected products log these irrelevant properties. This can inadvertently include sensitive user credentials or other confidential information depending on the nature of the misconfigured...

EUVD-2026-115114

When an Event Publisher output adapter is configured with properties that are irrelevant to its function, the affected products log these irrelevant properties. This can inadvertently include sensitive user credentials or other confidential information depending on the nature of the misconfigured...

firefox: Denial-of-service in the Printing: Output component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the Printing: Output component...

CVE-2026-18800: WSO2: When an Event Publisher output adapter is configured with properties that are irrelevant to its function, the affected…

When an Event Publisher output adapter is configured with properties that are irrelevant to its function, the affected products log these irrelevant properties. This can inadvertently include sensitive user credentials or other confidential information depending on the nature of the misconfigured...

PT-2026-135401

When an Event Publisher output adapter is configured with properties that are irrelevant to its function, the affected products log these irrelevant properties. This can inadvertently include sensitive user credentials or other confidential information depending on the nature of the misconfigured...

CVE-2026-102801: regularlabs.com: Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere…

Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla 3.0.1 - An administrator can disable output of user email addresses or usernames in Users Anywhere. In affected code, attributes supplied inside a user or email /...

CVE-2026-9833

CVE-2026-9833 CVE ID: CVE-2026-9833 Vulnerability Type: Cross-Site Scripting XSS – Reflected XSS CWE: CWE-79 – Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Severity: High CISA ADP CVSS v3.1: 7.1 Overview CVE-2026-9833 affects the Tag Groups – Advanced Way to...

RustHound-CE

RustHound-CE is a cross-platform and cross-compiled BloodHound collector tool written in Rust, making it compatible with Linux, Windows, and macOS. It therefore generates all the JSON files that can be analyzed by BloodHound Community Edition. This version is only compatible with BloodHound...