EUVD-2026-58559

A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetchswagger. Performing a manipulation results in server-side request forgery...

CVE-2026-19764

CVE-2026-19764 affects Raisecom’s Command and Dispatch Management Platform up to version 7.6.5. The vulnerability is in an unknown part of /app/users/getpwd.php where manipulating the sip argument causes SQL injection. The issue is exploitable remotely and public exploit code exists. References d...

CVE-2026-19764

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...

EUVD-2026-58550

A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjectController.java of the component Code Generator. Such manipulation of the argument outputDir/parent/projectPrefix leads to path traversal. It is possible to launch the attack...

EUVD-2026-58529

A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. Affected is the function exploreurl of the file src/mcp-rdf-explorer/server.py of the component MCP Server. Performing a manipulation of the argument url results in server-side request forgery. The attack may be...

CVE-2026-19762 DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal

A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack may be launched remotely. The exploit h...

CVE-2026-19762

DTStack Taier 1.4.0 contains a path traversal vulnerability in the Chunk-Check Endpoint, specifically in Paths.ge within FileChunkController.java. Manipulating the argument Name allows traversal, and the attack can be launched remotely. The exploit has been published. Current documents do not pro...

EUVD-2026-58556

A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack may be launched remotely. The exploit h...

PT-2026-72050

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Doctors Appointment System version 1.0 Description An unrestricted upload issue exists in the /save file.php endpoint within the save doctor function. This flaw allows a remote attacker to upload files without proper...

PT-2026-71977

Name of the Vulnerable Software and Affected Versions Tenda AC12 version 15.03.06.23 multi TD01 Description A buffer overflow occurs in the httpd web management interface when the rebootTime argument is manipulated. This issue is located within the formSetRebootTimer function of the...

PT-2026-71949

Name of the Vulnerable Software and Affected Versions Baicells EG3661M version BaiCE BQ6 2.0.5.3 NA Description An OS command injection flaw exists in the LuCI Web Interface component. A remote attacker can exploit this by manipulating the MaxHops, Timeout, or Size arguments within the...

PT-2026-72041

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...

PT-2026-72035

A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such manipulation leads to improper access controls. The attack can be launched remotely. The exploit is publicly available an...

grafana security update

10.2.6-23.1 - fix CVE-2026-42127: cap request body size and validate public dashboard access - Resolves RHEL-219382...

PT-2026-72049

A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...

PT-2026-72034

Name of the Vulnerable Software and Affected Versions Webkul Bagisto versions prior to 2.4.5 Description An authorization bypass exists in the Admin Customer Impersonation Feature within the file /admin/customers/login-as-customer/. A remote attacker can exploit this by manipulating the ID...

PT-2026-72018

Name of the Vulnerable Software and Affected Versions alldatacenter alldata versions prior to 0.6.9 Description A remote deserialization issue exists within the xxl-rpc Listener component, specifically in the Hessian2Input.readObject function located in the /serialize/impl/HessianSerializer.java...

PT-2026-71955

Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 multi TD01 Description A stack-based buffer overflow exists in the httpd web management interface. The issue occurs within the set device name function located in the '/goform/SetOnlineDevName' endpoint when th...

CVE-2026-19758 dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal

A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...

CVE-2026-19758 dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal

A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...