7047 matches found
PT-2026-128329
Ultralytics torch safe load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...
CVE-2026-116895
REDAXO versions before 5.21.5 are vulnerable to a cross-site request forgery (CSRF) vulnerability in the index.php file. The root cause is the backend's processing of the safemode GET parameter without validating a CSRF token . A successful attack occurs when an attacker lures a logged-in adminis...
CVE-2026-116895 REDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameter
REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backend processes the safemode GET parameter in index.php without validating a CSRF token. Attackers can lure a logged-in administrator into opening a crafted link to disable global safe mode, writing safemode:...
CVE-2026-116895 REDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameter
REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backend processes the safemode GET parameter in index.php without validating a CSRF token. Attackers can lure a logged-in administrator into opening a crafted link to disable global safe mode, writing safemode:...
PT-2026-125510
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE FOR TEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using RETURN DOM, RETURN DOM FRAGMENT, or IN PLACE modes. Attackers can split expressions across text nodes separated by disallowed elements, whi...
Safe Browsing Protected Information Access
The vulnerability in the Safe Browsing component of Google Chrome and Microsoft Edge is related to insufficient validation of input protected information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a malicious file...
PT-2026-123054
A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request url safe of the file app/function/web.function.php of the component Remote Download. This manipulation causes server-side request forgery. It is possible to initiate the attack remotely. The vendor was...
Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities
Summary Multiple vulnerabilities were found in dependent open source libraries used by IBM Quantum Safe Explorer. IBM Quantum Safe Explorer has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-73581 DESCRIPTION: Improper Chec...
CVE-2026-98902
In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bmseq comparison wrap-safe Once the 32-bit seq wraps, a newer bmseq can look smaller than old, so .. covert to wrap-safe calculate way...
UBUNTU-CVE-2026-98902
In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bmseq comparison wrap-safe Once the 32-bit seq wraps, a newer bmseq can look smaller than old, so .. covert to wrap-safe calculate way...
CVE-2026-98902 md/raid5: let stripe batch bm_seq comparison wrap-safe
In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bmseq comparison wrap-safe Once the 32-bit seq wraps, a newer bmseq can look smaller than old, so .. covert to wrap-safe calculate way...
CVE-2026-98902
The Linux kernel contains a vulnerability in the md/raid5 component related to how bm_seq comparisons are handled. The root cause is that once the 32-bit seq wraps, a newer bm_seq might appear smaller than an older one. The issue is resolved by converting the logic to a wrap-safe calculation meth...
CVE-2026-98902
In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bmseq comparison wrap-safe Once the 32-bit seq wraps, a newer bmseq can look smaller than old, so .. covert to wrap-safe calculate way...
EUVD-2026-108858
In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bmseq comparison wrap-safe Once the 32-bit seq wraps, a newer bmseq can look smaller than old, so .. covert to wrap-safe calculate way...
CVE-2026-98902 md/raid5: let stripe batch bm_seq comparison wrap-safe
In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bmseq comparison wrap-safe Once the 32-bit seq wraps, a newer bmseq can look smaller than old, so .. covert to wrap-safe calculate way...
PT-2026-121872
In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bm seq comparison wrap-safe Once the 32-bit seq wraps, a newer bm seq can look smaller than old, so .. covert to wrap-safe calculate way...
anvyl (>=0.1.0, <=0.1.22), aurapro-ui (>=3.1.0, <=3.9.3) +65 more potentially affected by CVE-2026-114610 via fpdf2 (>=2.5.0, <=2.8.7)
fpdf2 PYPI version =2.5.0, =0.1.0, =3.1.0, =3.9.11, =0.7.0a0, =3.0.0, =1.0.0, =0.1.0, =0.1.23, =2026.2.23, =0.0.1, =1.0.0, =0.2.10, =0.1.2, =0.1.3.60 and more Source cves: CVE-2026-114610 Source advisory: MEND:CVE-2026-114610...
PQ-Vault: Provably Quantum-Safe Asset Custody for Unmodified Ethereum
A quantum computer could recover the key of any Ethereum account whose public key appears on chain. We prove that no sidechain or bridge that leaves Ethereum's rules unchanged can protect such accounts: their funds must move into a contract whose release condition relies only on quantum-safe...
Safe Multi-Robot Collaboration with Uniform Exclusion Using Trust
Robot swarms coordinate through directed, time-varying local communication links, some of which may be compromised to allow the transmission of arbitrary malicious data. We provide an algorithm that acts as a wrapper around robot communication---when a robot seeks to update its state using data...
PT-2026-117688
šØ CVE-2026-112991 The html to markdown expansion module in MISP Modules contains a server-side request forgery SSRF vulnerability in its is safe url URL validation function. The BLOCKED RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address...