CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

EUVD-2026-93772

LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, .first/.last, negative index, and for-loop iteration...

GHSA-FWXR-J5W2-587M LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration

Summary LiquidJS’s ownPropertyOnly option is intended to prevent templates from reading inherited or prototype properties from scope data. With ownPropertyOnly: true, direct access such as: liquid a0 correctly blocks an inherited array index. However, the same inherited value is still disclosed...

NPM: LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration

NPM: LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, .first/.last, negative index, and for-loop iteration vulnerability discovered by ? in WordPress Npm liquidjs versions = 10.27.1...

CVE-2025-54068-livewire

CVE-2025-54068 - Livewire v3.6.3 भेद्य प्रयोगशाला यह फ़ोल्डर एक न्यूनतम Laravel + Livewire v3 एप्लिकेशन बनाता है जो Livewire 3.6.3 भेद्य पर पिन किया गया है, जो CVE-2025-54068 को पुनः उत्पन्न करने के लिए है। माउंटेड कंपोनेंट को जानबूझकर सार्वजनिक एक्सप्लॉइट श्रृंखला के साथ संगत बनाया गया है यह...

cve-2022-49186-research

CVE-2022-49186: بحث في تصعيد الامتيازات في نواة لينكس نظرة عامة بحث أمني وإثبات مفهوم لاستغلال ثغرة CVE-2022-49186، وهي ثغرة في نواة لينكس في مشغل ساعة Visconti تؤدي إلى تصعيد امتيازات محلية من خلال تجاوز سعة مصفوفة. تفاصيل الثغرة النوع : تجاوز سعة مصفوفة بسبب تحويل من signed إلى unsigned درجة CV...

CVE-2026-106120 LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, enabling ownPropertyOnly does not consistently restrict inherited array indices because negative indexing, .first, .last, the first filter, the last filter, join, reverse, slice, compact, and...

CVE-2026-106120 LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, enabling ownPropertyOnly does not consistently restrict inherited array indices because negative indexing, .first, .last, the first filter, the last filter, join, reverse, slice, compact, and...

CVE-2026-105860

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, the default tenant array field access allows an authenticated user to assign the user's own account to other tenants...

CVE-2020-0674-Exploit

CVE-2020-0674 CVE-2020-0674 पुराने jscript इंजन में एक use-after-free भेद्यता है। इसे Internet Explorer में ट्रिगर किया जा सकता है। यहाँ दिया गया exploit maxpl0it द्वारा लिखा गया है, लेकिन इस भेद्यता की खोज Qihoo 360 ने की थी, जिसका उपयोग वास्तविक दुनिया में हो रहा था। यह exploit केवल calc खोलता...

CVE-2026-105860

The Payload headless content management system is vulnerable to a tenant authorization bypass in the @payloadcms/plugin-multi-tenant plugin. In versions before 3.90.0 and canary versions before 4.0.0-canary.34 , the default tenant array field access allows an authenticated user to assign their ow...

Vyper: Call stack corruption when passing complex type containing non-base type members as argument

Impact When we pass a multi-dimensional array like 1, 2, 3, 4 as an argument to internal/external functions we get incorrect output. This is due to a stack management issue, because it was assumed that the size of each subtype of an array/struct is 32, which is not always correct. Example code:...

GHSA-4V7V-GQF9-WW2G Vyper: Call stack corruption when passing complex type containing non-base type members as argument

Impact When we pass a multi-dimensional array like 1, 2, 3, 4 as an argument to internal/external functions we get incorrect output. This is due to a stack management issue, because it was assumed that the size of each subtype of an array/struct is 32, which is not always correct. Example code:...

numpy-1.13.1

حالة Travis CI --- NumPy هي الحزمة الأساسية المطلوبة للحوسبة العلمية باستخدام Python. تحتوي هذه الحزمة على: كائن مصفوفة N-بعدي قوي دوال متطورة للبث أدوات لدمج كود C/C++ وFortran قدرات مفيدة في الجبر الخطي، وتحويل فورييه، والأعداد العشوائية. إنها مشتقة من قاعدة كود Numeric القديمة ويمكن استخدامها...

wordpress-batch-rce-lab

wp2shell: ثغرة تنفيذ كود عن بُعد RCE في دفعات ووردبريس تحليل تقني لثغرة CVE-2026-63030، وهي خلل منطقي في نقطة نهاية الدفعات batch endpoint الخاصة بواجهة REST API في نواة ووردبريس، تسمح لطلب مجهول بالتنفيذ تحت مسار route وفحص صلاحيات يعودان لطلب مختلف، وتتسلسل إلى CVE-2026-60137 حقن SQL لتحقيق تنف...

cvelistV5

ملاحظة 2026-2-17 إضافة يوم معالجة إضافي لتوحيد التاريخ لمعالجة التناقضات المحتملة جدول توحيد التاريخ الجديد: 2/16/26 - 2/28/26 ملاحظة 2026-2-10 تغيير ملفdeltaLog.json الخاص بتوحيد تاريخ السجلات يحتفظ ملف deltaLog.json عادةً بسجل متجدد من تاريخ تعديل سجلات CVE يعود إلى 30 يومًا. ومع ذلك، وطوال فتر...

Linux Distros Unpatched Vulnerability : CVE-2026-98291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btintelpcie: fix off-by-one bounds check in RX submit btintelpciesubmitrx used frbdindex rxq-count to guard the FRBD array access, allowing frbdindex...

ALSA-2026:76781 Moderate: glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

PT-2026-106793

Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-multi-tenant versions prior to 3.90.0 @payloadcms/plugin-multi-tenant canary versions prior to 4.0.0-canary.34 Description An authenticated user can assign their own account to other tenants due to the default tenant array...