CVE-2026-91996

lamp-cloud through version 5.10.0 whitelists the path pattern /*/anno/** for anonymous access, leaving the /defGenProject/anno/getProperties endpoint unauthenticated. An unauthenticated attacker can send a POST request to this endpoint to retrieve the server's full JVM system property map , inclu...

SUSE-SU-2026:21450-1 Security update for vim

This update for vim fixes the following issue: Update to version 9.2.0398. Security issues fixed: - CVE-2026-39881: missing sanitization in defineAnnoType and specialKeys can lead to arbitrary Ex command injection via a malicious NetBeans server bsc1261833...

CVE-2026-39881

CVE-2026-39881 : Vim prior to 9.2.0316 is vulnerable to a command-injection in Vim's netbeans interface. The issue arises from unsanitized strings in the defineAnnoType and specialKeys protocol messages, allowing a malicious NetBeans server that Vim connects to to execute arbitrary Ex commands. T...

CVE-2026-39881 Vim Ex command injection in Vims NetBeans integration

Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol...

Team Mirai and Democracy

Japan’s election last month and the rise of the country’s newest and most innovative political party, Team Mirai, illustrates the viability of a different way to do politics. In this model, technology is used to make democratic processes stronger, instead of undermining them. It is harnessed to...

Linux Distros Unpatched Vulnerability : CVE-2019-9086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter. CVE-2019-9086 Note that Nessus relies on the presence of the package a...

CVE-2019-9086

HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...

Sql injection

HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...

UBUNTU-CVE-2019-9086

HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...

CVE-2019-9086: Improper Neutralization of Special Elements used in an SQL Command

HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...

UBUNTU-CVE-2019-8937

HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizzatabelle.php...

DEBIAN-CVE-2019-8937

HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizzatabelle.php...

Anno: Build an Empire - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Anno: Build an Empire published at the 'play' market has multiple vulnerabilities...