CVE-2026-118276

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/webcore/src/v09/basiccatalog/expressions/expressionparser.ts of the component Parser. This manipulation causes resource consumption. The attack may be...

CVE-2026-118276 a2ui-project a2ui Parser expression_parser.ts formatString resource consumption

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/webcore/src/v09/basiccatalog/expressions/expressionparser.ts of the component Parser. This manipulation causes resource consumption. The attack may be...

EUVD-2026-111578

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/webcore/src/v09/basiccatalog/expressions/expressionparser.ts of the component Parser. This manipulation causes resource consumption. The attack may be...

CVE-2026-116613 Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atbshortcodehandler function fetching an arbitrary post by attacker-supplied ID and, in the 'publish' branch,...

EUVD-2026-111575

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atbshortcodehandler function fetching an arbitrary post by attacker-supplied ID and, in the 'publish' branch,...

CVE-2026-116613 Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atbshortcodehandler function fetching an arbitrary post by attacker-supplied ID and, in the 'publish' branch,...

CVE-2026-116613

The Animated Text Block plugin for WordPress (versions up to and including 1.2.6 ) is vulnerable to Sensitive Information Exposure via the animated-text shortcode. The root cause is that the atb_shortcode_handler() function fetches an arbitrary post using an attacker-supplied ID and executes disp...

CVE-2026-111255 affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parameter

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 via the uploadimage function. This is due to insufficient file type validation in uploadimage due to a weak Content-Type...

CVE-2026-111255

The affiliate-toolkit plugin for WordPress (versions up to and including 3.9.2 ) is vulnerable to Arbitrary File Upload via the upload_image function. The root cause is insufficient file type validation, specifically a weak Content-Type prefix check combined with extension derivation from an atta...

CVE-2026-111255 affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parameter

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 via the uploadimage function. This is due to insufficient file type validation in uploadimage due to a weak Content-Type...

EUVD-2026-111574

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 via the uploadimage function. This is due to insufficient file type validation in uploadimage due to a weak Content-Type...

Exploit for External Control of File Name or Path in Elastic Kibana

Work 1 — Secure REST API Development with CI/CD and Real CVE V...

kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE

A flaw was found in the Linux kernel's iSCSI target core. This use-after-free vulnerability occurs in the corescsi3emulateproregisterandmove function. When processing iSCSI TransportIDs, a memory buffer is prematurely unmapped while still being referenced, particularly when the parameter list spa...

kernel: net: smc: fix splice entry lifetime imbalance in smc_rx_splice

A flaw was found in the Linux kernel's smcrxsplice function within the net: smc component. This vulnerability arises from an imbalance in the lifetime management of splice entries, where page references are not properly handled before being passed to splicetopipe. This can lead to a reference cou...

kernel: fuse: re-lock request before replacing page cache folio

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. The fusetrymovefolio function, responsible for managing page cache folios, fails to re-lock a request after initially unlocking it on a successful path. This oversight allows another function, fusechanabort, to...

kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

A flaw was found in the Linux kernel's afunix UNIX domain sockets component. A race condition in the unixstreamdatawait function allows a local attacker to trigger a Use-After-Free UAF vulnerability. This occurs because the function peeks at a socket buffer without proper locking, enabling anothe...

kernel: net/packet: avoid fanout hook re-registration after unregister

A flaw was found in the Linux kernel's net/packet subsystem. A race condition can occur during the re-registration of a fanout hook after a network device has been unregistered. This issue arises when the packetsetring function attempts to re-add a fanout hook based on a stale state, potentially...

CVE-2026-118275

A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the file renderers/webcore/src/v09/rendering/data-context.ts of the component Resolver. The manipulation results in resource consumption. The attack can be launched remotely. The...

CVE-2026-118275 a2ui-project a2ui Resolver data-context.ts DataContext.resolveSignal resource consumption

A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the file renderers/webcore/src/v09/rendering/data-context.ts of the component Resolver. The manipulation results in resource consumption. The attack can be launched remotely. The...

EUVD-2026-111573

A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the file renderers/webcore/src/v09/rendering/data-context.ts of the component Resolver. The manipulation results in resource consumption. The attack can be launched remotely. The...