CVE-2026-66269

Dell OpenManage Server Administrator , versions prior to 11.1.0.3 , contains an Unsafe Reflection vulnerability in which externally controlled input is used to select classes or code. An unauthenticated attacker with remote network access could exploit this flaw, resulting in a protection mechani...

EUVD-2026-81425

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism...

CVE-2026-66269

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism...

CVE-2026-92838

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location. If...

CVE-2026-92838

A DLL hijacking vulnerability in the GeoVision GV-Remote E-Map desktop application allows a local attacker to place a malicious DLL in a directory searched before the legitimate library location, achieving arbitrary code execution in the context of the GV-Remote E-Map process. Exploitation requir...

CVE-2026-92838 GeoVision GV-Remote E-Map dll hijacking vulnerability

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location. If...

EUVD-2026-81314

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location. If...

PT-2026-94220

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description An unauthenticated attacker with remote access can exploit a Use of Externally-Controlled Input to Select Classes or Code Unsafe Reflection issue. Unsafe Reflection...

CVE-2026-66269: Use of Externally-Controlled Input to Select Classes or Code

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism...

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview djust is a Phoenix LiveView-style reactive components for Django with Rust-powered performance. Real-time UI updates over WebSocket, no JavaScript build step required. Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe...

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview apache-airflow-providers-apache-kafka is a Provider package apache-airflow-providers-apache-kafka for Apache Airflow Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' in the importstring function. An...

CVE-2026-101904

creationtimestamp| type| source ---|---|--- 2026-09-16 09:04:21+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32 2026-10-01 12:01:14+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwssq47o542o 2026-10-02...

EUVD-2026-80061

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddnswanlistshow.cgi caused by unsafe eval handling of DDNS data. Attackers can inject malicious script through the DDNS configuration path, leading to persistent execution when the affected page is viewed...

(0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction is required to exploit this vulnerability in that the target must load a malicious agent configuration from the repository. The specific flaw exists within the...

PT-2026-93835

Name of the Vulnerable Software and Affected Versions CrewAI affected versions not specified Description An unsafe reflection flaw exists in the crewAI Framework during the agent loading process. The load agent from repository function imports content from a provided repository without an...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in keras-3.15.0-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in keras-3.15.0-py3-none-any.whl Vulnerability Details CVEID:CVE-2026-12484 DESCRIPTION: A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public...

CVE-2026-12351

IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 LTS, and 10.0.0.0 could allow a remote attacker to execute arbitrary code due to unsafe JNDI lookup processing when the IVT application is deployed...

CVE-2026-11729

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code in client applications due to unsafe...

CVE-2026-11729 IBM MQ Java messaging is vulnerable to remote code execution

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code in client applications due to unsafe...

EUVD-2026-78903

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code in client applications due to unsafe...