FlowiseAI Flowise permission and access control issue vulnerability

FlowiseAI Flowise versions 3.1.4 and earlier contain a vulnerability related to permission escalation and access control. This vulnerability stems from a sandbox escape issue: attackers can submit JavaScript to /api/v1/node-custom-function, then write files to the mammoth package via LocalFileSto...

Chamilo 3 deserialization injection vulnerability

Versions prior to Chamilo 3 2.0.1 contain a deserialization injection vulnerability. This vulnerability arises because public/main/inc/lib/career.lib.php and public/main/cron/importcsv.php fail to utilize the allowedclasses: false security option when invoking PHP’s native unserialize function on...

Elixir programming language Elixir input validation error vulnerability

A security vulnerability exists in the Elixir programming language versions prior to 0.5.0 through 1.18.6, from 1.19.0-rc.0 up to 1.19.7, and from 1.20.0-rc.0 up to 1.20.5. This vulnerability stems from improper validation of the number of ports specified in input by the URI module. In...

WordPress Essential Addons for Elementor permission and access control issue vulnerability

WordPress Essential Addons for Elementor versions 6.8.7 and earlier contain a permission and access control vulnerability. This flaw stems from improper handling of the pageid parameter in the registeruser function. The post state rejection list accepts the inherit state carried by modified...

Juspay Technologies Composable Open-Source Payments Infrastructure input validation error vulnerability

Versions prior to 1.128.0 and 2026.10.01.0 of Juspay Technologies’ Composable Open-Source Payments Infrastructure contain an input validation error vulnerability. This vulnerability arises because the verifywebhooksource function within the Worldpayxml connector always returns true without...

WordPress Page and Post Restriction authorization issue vulnerability

WordPress Page and Post Restriction versions 1.6.1 and earlier contain an authorization vulnerability. This vulnerability arises because the paprrestrictpagepostrestapi function fails to validate a REST nonce when processing GET or HEAD REST requests. It then re-authenticates the current user via...

CVE-2026-111500: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Server-side request forgery...

PT-2026-134185

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.4 Description The WeightMatrix::DeSerialize function trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FAST FLOAT builds,...

CVE-2026-119978: FlowiseAI Flowise: Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by…

Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOWBUILTINDEP=true. Attackers can submit JavaScript to /api/v1/node-custom-function that writes a file into the mammoth...

PT-2026-134184

Name of the Vulnerable Software and Affected Versions Tesseract versions 5.4.0 through 5.5.3 Description The AppendLinePolygon function in src/api/pagerenderer.cpp destroys a caller-owned right-to-left Pta accumulator when it is received by value. This results in line top rtl pts and line bottom...

Medium: libreswan

Issue Overview: In Libreswan before 5.3.2, when the operating system and Libreswan are running in FIPS mode and at least one CA certificate is loaded, a malformed X.509 certificate payload can cause the pluto daemon to abort on an assertion. In FIPS mode, adddecodedcert calls CERTExtractPublicKey...

CVE-2026-104739: rabilal JS Help Desk – AI-Powered Support & Ticketing System: The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion…

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to, and including, 5.0.1. This makes it possible for authenticated attackers, wi...

PT-2026-134241

Name of the Vulnerable Software and Affected Versions TAKO AI Agent for Okta versions prior to 3.0.1-beta Description An unauthenticated network attacker can create the first administrator account before the legitimate owner completes the initial setup. The initial setup function only checks the ...

CVE-2026-119059: keywordrush Content Egg – Affiliate Product Importer & Price Comparison: The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post…

The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capability check on the ajaxUpdateProducts function in versions up to, and including, 12.0.0. The handler verifies a static nonce 'contenteggmetabox' and the generic 'editposts'...

VulnCheck KEV: CVE-2026-116512

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated...

Google Chrome Microsoft Edge Navigation XSS

The vulnerability in the Navigation function of Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information and trigger a denial-of-service condition via a specially crafted HTML page...

VulnCheck KEV: CVE-2020-35847

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function...

Beatriceodera cak-filemanagement-system arbitrary file upload vulnerability

The Beatriceodera cak-filemanagement-system versions 5e6433246475e66462e1fea980688de96a049297 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the File parameter in the moveuploadedfile function within the admin/addlogs.php file, potentially allowin...

Tesseract-OCR Tesseract buffer error vulnerability

A security vulnerability exists in Tesseract OCR versions 5.4.0 through 5.5.4. This vulnerability stems from the AppendLinePolygon function in src/api/pagerenderer.cpp, which accepts and destroys a left-to-right Pta accumulator owned by the caller via a parameter. As a result, linetoprtlpts and...

themefusion Avada arbitrary file upload vulnerability

Theme Fusion Avada versions 7.16.2 and earlier contain an arbitrary file upload vulnerability. This vulnerability stems from insufficient validation of file types prior to processing uploaded files by the convertpaletteimagestotruecolor function, potentially allowing unauthenticated attackers to...