EUVD-2026-25916

A reflected cross-site scripting XSS vulnerability exists in WebFileSys version 2.31.1. User-controlled input is reflected into HTML and JavaScript contexts without proper output encoding, allowing arbitrary JavaScript execution in the victim's browser...

PT-2026-7891

webfsd 1.21 is vulnerable to a Buffer Overflow via a crafted request. This is due to the filename variable...

Digi ConnectPort security vulnerabilities

Digi ConnectPort is a server from Digital Networks Malaysia Digi Inc. It provides wireless communication. A security vulnerability exists in Digi ConnectPort versions prior to 1.4.12 that stems from a directory traversal vulnerability in WebFS, which could lead to unauthorized access to data...

hadoop: WebHDFS client might send SPNEGO authorization header

A flaw was found in Apache hadoop. The WebHDFS client can send a SPNEGO authorization header to a remote URL without proper verification which could lead to an access restriction bypass. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...