CVE-2026-116107

The Datafeedr Product Sets Plugin for WordPress, affecting versions up to 1.3.24 , contains a vulnerability in the AJAX Handlers component. Specifically, the function dfrps_ajax_delete_saved_search within the functions/ajax.php file is susceptible to missing authorization . This flaw allows for r...

EUVD-2026-109599

A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrpsajaxdeletesavedsearch of the file functions/ajax.php of the component AJAX Handlers. The manipulation results in missing authorization. The attack may be launched...

CVE-2024-9264-Fixed

🛠️ CVE-2024-9264 - Fixed Grafana RCE Exploit This is a fixed version of the proof-of-concept exploit for CVE-2024-9264 , a critical remote code execution vulnerability in Grafana via SQL expressions and DuckDB. 🔗 Original advisory: Grafana Security Release ❌ Original PoC: Broken due to syntax...

CLSA-2026-1792977831 kernel: Fix of 118 CVEs

Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count CVE-2026-64276 - media: av7110: prevent underflow in writetstodecoder CVE-2023-54284 - usb: usbtmc: check URB actuallength for interrupt-IN notifications CVE-2026-63904 - usb: usbfs: fix use-after-free of usbdevice in...

rocq-cve-poc-21683

CVE-2026-72705 — Rocq Guard Checker Accepts Fixpoint Passed as Higher-Order Argument Proving0 = 1 axiom-free via Russell's paradox through guard checker fixpoint bypass. Discovered autonomously by Claude Opus 4.6 Anthropic. Field| Value ---|--- Bug report| rocq-prover/rocq21683 Fix| PR 21684...

rocq-cve-poc-21682

CVE-2026-72703 — Rocq Guard Checker Accepts Non-Terminating Fixpoint via Unchecked Cross-Calls Proving0 = 1 axiom-free via guard checker uniform parameter bypass. Vulnerability Summary The Rocq kernel's guard checker fixpoint termination verifier treats all parameters of a nested mutual fixpoint ...

lean-cve-poc-14484

CVE-2026-72711 — Lean 4 Kernel Soundness Bug: Inference Cache Poisoning Proving0 = 1 axiom-free via opaque declaration FVar cache poisoning. Field| Value ---|--- Bug report| leanprover/lean414484 Fix| leanprover/lean414498 Affected| Lean 4 ≤ v4.31.0 / all prior versions Fixed in| nightly...

CVE-2026-116100

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The explo...

CVE-2026-116104

A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function funcsetnnablaversiondecorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of the argument function.type results in code...

CVE-2026-116103

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function loadparamintxt of the file python/src/nnabla/utils/cli/encodedecodeparam.py of the component Encode Param Command Handler. Such manipulation leads to code injection. It is possible to launch th...

CVE-2026-116101

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could ...

CVE-2026-116102

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function buildwindowscommand of the file dockerexecutor.py. This manipulation of the argument projectname causes os command injection. It is possible to initiate the attack remotely...

CVE-2026-116105 HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission

A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched...

CVE-2026-116105

The HeyCyan App 1.0.103 for Android (package com.glasssutdio.wear) is vulnerable to cleartext transmission of sensitive information due to a permissive Network Security Configuration in the AndroidManifest.xml. This allows the app to communicate over plain HTTP and trust user-installed Certificat...

EUVD-2026-109593

A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched...

CVE-2026-116105 HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission

A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched...

NativeMirror

NativeMirror NativeMirror is an independent Object Pascal implementation of PE-sieve functionality, adapted from PE-sieve by hasherezade. It scans process memory, detects modified or injected code, and dumps PE files. The implementation uses Delphi-native APIs and NativePe as its PE engine. It ca...

CVE-2026-116104 Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection

A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function funcsetnnablaversiondecorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of the argument function.type results in code...

CVE-2026-116104

A code injection vulnerability exists in Sony Neural Network Libraries (up to version 1.39.0 ) within the NNP Converter component. The flaw resides in the func_set_nnabla_version_decorate function located in python/src/nnabla/utils/converter/utils.py, where manipulating the function.type argument...

EUVD-2026-109592

A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function funcsetnnablaversiondecorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of the argument function.type results in code...