CVE-2026-81676

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limitvideos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...

PT-2026-82738

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description A weakness exists where the driver fails to sanitize special elements in caller-supplied database and collection name components during the composition of the target namespace for an...

PT-2026-82557

Name of the Vulnerable Software and Affected Versions Netron versions prior to 9.1.3 Description The desktop application contains a Reflected Cross-Site Scripting XSS flaw caused by unsanitized node names. This allows an attacker to hide specific nodes, conduct port scanning, or leverage a Chrome...

CVE-2026-37009

A SQL injection vulnerability exists in the NL2SQLTool component of crewai-tools v1.10.2rc1 . The root cause is an unsanitized sql_query argument , which allows a remote attacker to execute arbitrary SQL commands with no privileges required and low attack complexity (CVSS 3.1: 6.5 MEDIUM ). CISA ...

CVE-2026-37009

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sqlquery argument...

CVE-2026-75333

yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File for file system operations without any path sanitization or whitelist validation...

GHSA-CRX4-7MMQ-J74J OpenSTAManager has HTML Injection in modules/utenti/edit.php

Summary An HTML Injection vulnerability exists in the user group creation functionality that allows an attacker to inject arbitrary HTML content into the application interface. The vulnerability occurs when user-supplied input in the group name field is not properly sanitized before being rendere...

CVE-2026-32257

Winter is a free, open-source content management system CMS based on the Laravel PHP framework. Prior to 1.2.13, custom CSS supplied through the Brand Settings Styles field by a backend user with the backend.managebranding permission is compiled by the LESS parser and rendered without sanitizatio...

CVE-2026-32258 Winter: Stored XSS through Editor Settings custom styles

Winter is a free, open-source content management system CMS based on the Laravel PHP framework. From 1.2.10 through 1.2.12, authenticated backend users with the backend.manageeditor permission can store custom Markup Styles that are compiled by the LESS parser and rendered without sanitization on...

CVE-2026-32257 Winter: Stored XSS through Brand Settings custom styles

Winter is a free, open-source content management system CMS based on the Laravel PHP framework. Prior to 1.2.13, custom CSS supplied through the Brand Settings Styles field by a backend user with the backend.managebranding permission is compiled by the LESS parser and rendered without sanitizatio...

CVE-2026-32257 Winter: Stored XSS through Brand Settings custom styles

Winter is a free, open-source content management system CMS based on the Laravel PHP framework. Prior to 1.2.13, custom CSS supplied through the Brand Settings Styles field by a backend user with the backend.managebranding permission is compiled by the LESS parser and rendered without sanitizatio...

CVE-2026-80426

FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the description string to React's dangerouslySetInnerHTML, and no layer between storage and render escapes or sanitises it; the...

EUVD-2026-66600

FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the description string to React's dangerouslySetInnerHTML, and no layer between storage and render escapes or sanitises it; the...

EUVD-2026-66409

Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX. This vulnerability allows an attacker to escalate privilege or perform an authorization bypass by sending certain values that the attach-consumer-label plugin does not sanitise correctly. This issue affects Apache...

CVE-2025-29276

CVE-2025-29276 Beweis des Konzepts PoC: Im Reiter 'Diagnose' rufen Sie das Ping-Tool auf und fügen Sie im Feld 'Host-Adresse' die folgende XSS-Nutzlast ein: root@kitploit: alert1 Beschreibung: Das direkte Absenden der Nutzlast im Feld 'Host-Adresse' löst eine reflektierte Cross-Site Scripting...

CVE-2026-77790

The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks...

EUVD-2026-66287

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

CVE-2026-77757

CVE-2026-77757 affects the Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin (versions 8.5 through 8.9.2 ). The plugin fails to sanitize a user-supplied image reference before using it as the source of a file move via the REST v2 Listing Submission endpoint. A...

CVE-2026-77757 Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

PT-2026-81967

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...