EUVD-2026-99212

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2019-16724

Vulnerability Description File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter. This exploit was tested on windows 7 Home. It will certainly break when on other...

CVE-2026-108384 dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parsefixed interpolates a fixed type's aliases value directly into a generated types.confixed...

CVE-2026-108384

The dataclasses-avroschema library (versions 0.38.0 through 0.70.5 ) contains a code injection vulnerability in the BaseGenerator.parse_fixed function. The root cause is the direct interpolation of a fixed type's aliases value into a generated types.confixed annotation. While lists are correctly ...

CVE-2026-92892 Potential command execution on the host running JFrog CLI.

Potential arbitrary code execution, under specific configurations...

CVE-2026-92892

Potential arbitrary code execution, under specific configurations...

EUVD-2026-98979

Potential arbitrary code execution, under specific configurations...

CVE-2026-92892 Potential command execution on the host running JFrog CLI.

Potential arbitrary code execution, under specific configurations...

CVE-2026-92892

The JFrog CLI is vulnerable to potential arbitrary code execution on the host machine under specific configurations. The root cause is identified as CWE-88 (Improper Neutralization of Argument Delimiters in a Command), leading to argument injection . The vulnerability has a CRITICAL CVSS v3.1 sco...

CVE-2026-108381

The dataclasses-avroschema library (versions 0.44.0 through 0.70.5 ) is vulnerable to code injection within its Pydantic and AvroDantic model generators. The vulnerability occurs because the library inserts a schema field's pydantic-class value into a generated field annotation without safely res...

CVE-2026-108380 dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0.70.5, PydanticFieldRepresentation.addfieldproperties inserts a schema field's doc value between the quotes of a...

CVE-2026-108379 dataclasses-avroschema fixed namespaces allow code injection in generated annotations

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parsefixed inserts a fixed type's namespace value between quotes inside a generated types.confix...

CVE-2026-108379

The dataclasses-avroschema library (versions 0.38.0 through 0.70.5 ) contains a code injection vulnerability. The BaseGenerator.parse_fixed function fails to escape or validate a fixed type's namespace value when generating Python code from Avro schemas. An attacker can provide a crafted quote to...

CVE-2026-78799

Directory Traversal vulnerability in Quanxun Huiju Network Technology Beijing Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: = iKuai83.7.23Enterprise Build 202606021825 - Free Edition: = iKuai 84.0.304-beta allows a remote attacker to execute arbitrary code...

CVE-2026-108375

The dataclasses-avroschema library (versions 0.38.0 through 0.70.5 ) is vulnerable to code injection when generating Python code from Avro schemas. The root cause lies in how the library handles field defaults and fixed types: FieldRepresentation.get_field_default fails to escape schema-controlle...

CVE-2026-109964

A flaw was found in ImageMagick. A remote attacker can exploit this vulnerability to achieve arbitrary code execution or trigger an application crash, resulting in a denial of service DoS. By providing a specially crafted PICT image file with manipulated dimension values, an integer overflow occu...

CVE-2026-93190

A flaw was found in the crosectypec component of the Linux kernel. The crostypecregisterpartnerpdos function does not properly validate the sourcecapcount and sinkcapcount values received from the Embedded Controller EC. An attacker could potentially provide manipulated count values, leading to a...

CVE-2026-93189

A flaw was found in the Linux kernel's Human Interface Device HID core. When a driver's probe fails after enabling input delivery, the hidhwstop function may free a hidraw structure while in-flight HID reports are still being processed. This timing issue can lead to a use-after-free vulnerability...

CVE-2024-48990-PoC

PoC for CVE-2024-48990 in needrestart educational purposes only https://www.qualys.com/2024/11/19/needrestart/needrestart.txt How to run? Running ./start.sh will compile the fake importlib library and start a script that waits for needrestart to be executed by root. It will pop a shell afterwards...

CVE-2026-55695

FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin/updater-handler.php and trigger performupdate, which passes the URL to update.sh. The updater...