EUVD-2026-95103

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

CVE-2026-107709

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3 . The issue is located in lib/decompress-zip.js, where the software improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive with entries resolving to prefix-sibling directories can ca...

CVE-2026-107709 Bower decompress-zip has a path traversal vulnerability

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

EUVD-2026-42900

PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow...

kernel: gfs2: Fix slab-use-after-free in qd_put

A flaw was found in the Linux kernel's GFS2 file system. During filesystem shutdown, quota data objects were freed without being properly removed from the Least Recently Used LRU list. This oversight could lead to a use-after-free vulnerability, where the system attempts to access memory that has...

kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths

A flaw was found in the Linux kernel's Bluetooth hciuart component. Lifecycle management issues, including Use-After-Free UAF and race conditions, were identified during the closing and initialization paths. These issues can lead to the dereferencing of freed memory, potentially causing system...

kernel: nvme: add missing SRCU grace period in error path

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

kernel: netfilter: flowtable: publish GC-visible tuple last

A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...

kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state

A flaw was found in the Linux kernel's netfilter subsystem. When a network namespace is dismantled, the packet logging component frees memory without waiting for ongoing logging operations to complete, resulting in a use-after-free condition. A local attacker could exploit this flaw during networ...

kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()

A flaw was found in the Linux kernel's netfilter Session Initiation Protocol SIP connection tracking module nfconntracksip. A remote attacker could send specially crafted SIP messages that cause an integer overflow during Network Address Translation NAT rewrite delta calculations. This overflow...

kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...

CVE-2026-85706-PoC

CVE-2026-85706 : lecture arbitraire de fichiers locaux sans authentification dans GitLab CE/EE CVE-2026-85706 est une vulnérabilité critique de type traversée de chemin / absence d'authentification dans les API Repository Commits et Repository Files de GitLab CE/EE : un attaquant non authentifié...

EUVD-2026-95101

Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a crafted \href value with a TAB byte in the URL scheme, causing filterURL to produce an empty protocol that bypasses the...

ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script

Script d'atténuation ServiceNow CVE-2025-11449 et CVE-2025-11450 Vue d'ensemble Ce script détecte et corrige automatiquement les vulnérabilités de sécurité CVE-2025-11449 et CVE-2025-11450 dans les macros d'interface utilisateur ServiceNow. Ces vulnérabilités pourraient permettre l'exécution de...

CVE-2026-1357

CVE-2026-1357 Environnement de laboratoire pour CVE-2026-1357 1. Construire l'environnement sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Lien du dépôt wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...

CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom

CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom Un service Bluetooth Classic RFCOMM de l'interphone Parani M10 est exposé sans appliquer d'authentification sécurisée ni de contrôle d'accès approprié. Une fois à portée, tout appareil peut établir une connexi...

CVE-2026-40487

CVE-2026-40487 - Postiz = 2.21.5 - Произвольная загрузка файлов через подмену MIME-типа с переходом в хранимый XSS и захват учетной записи Обнаружено и сообщено: Astaruf Полное описание: https://nstsec.com/en/posts/postiz-xss-cve-2026-40487/ Запись NVD:...

CVE-2024-12986

Scanner et exploit CVE-2024-12986 Ce dépôt contient un scanner et un exploit pour la vulnérabilité CVE-2024-12986 , qui est une vulnérabilité d'injection de commandes dans le point de terminaison apmcfgupptim des passerelles DrayTek. Cette vulnérabilité permet à un attaquant d'exécuter des...

CVE-2026-104077 Obsidian Desktop < 1.14.0 RCE via Slides Plugin Markdown

Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the...

EUVD-2026-95100

Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the...