CVE-2026-36471: Undefined Security Weakness

Deserialization of Untrusted Data of the postdata parameter in cnparseurl in CuteNews v.2.1.2 allows a remote attacker to inject arbitrary values into internal request variables including referer via a crafted base64-encoded serialized PHP payload submitted as a POST parameter...

CVE-2026-94097: Improper Neutralization of Special Elements used in a Command

A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/networktools of the component CGI Diagnostic Endpoint. This manipulation of the argument param/key/val causes command injection. Remote exploitation of the attack is possibl...

joombrute

JoomBrute モダンなJoomla認証攻撃ツールキット J3 / J4 / J5 - CVE-2023-23752 · CVE-2023-23755 · CVE-2025-25227 説明 Joomla CMSバージョン3、4、5をカバーする認証情報攻撃ツールキット。6つのサブコマンドが攻撃チェーン全体をエンドツーエンドで処理します： detect - バージョンフィンガープリント（マニフェストXML → generatorメタ → 管理画面マークアップ） enum - CVE-2023-23752...

SwordStamp

SwordStamp SwordStamp adds order-robust detection and semantic-span units to embedding-based semantic watermarks. This artifact contains the exact paper configuration, generation and detection code, the unchanged attack suite, quality evaluation, and deterministic result extraction and plotting...

CVE-2022-37705

推奨される説明 Amanda 3.5.1 に、backupユーザーをroot権限に昇格させることができる 特権昇格の欠陥が見つかりました。影響を受けるコンポーネントは、特定の 引数で /usr/bin/tar を実行する単なるラッパーである runtar SUID です。 これらの引数は攻撃者が制御可能です。このプログラムは tar バイナリに 渡される引数を正しくチェックしません（すべての引数が --ARG VALUE の ような形式であると想定していますが、--ARG=VALUE を1つの引数として 提供できます）。 追加情報...

CVE-2026-94093

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2026-94091

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulation of the argument fname causes deserialization. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-94094

OpenClaw up to 2026.9.5 is vulnerable to a remote denial-of-service in the Canvas Host Route component. The root cause is in the function createCanvasHostHandler (file extensions/canvas/src/host/server.ts): the HTTP GET path buffers the entire file via readFile() (src/canvas/serve.runtime.ts:17,1...

CVE-2025-29093-Arbitrary-File-Upload

CVE-2025-29093-Arbitrary-File-Upload このリポジトリは、Motivian Content Management System v.41.0.0 で発見されたセキュリティ脆弱性を公開するものです。 CVE-2025-29093: 任意のファイルアップロード（Arbitrary File Upload） この脆弱性は、責任ある開示（responsible disclosure）の慣行に従ってベンダーとMITREに報告されました。MITREは暫定CVE IDを割り当てました。詳細は45日間の開示期間の満了後に公開されます。 一般情報 タイトル: Motivi...

CVE-2025-32407

CVE-2025-32407 CVE-2025-32407 の概念実証：Samsung Galaxy Watch 向けアプリ「Samsung Internet for Galaxy Watch」バージョン 5.0.9 における TLS 証明書検証の設定ミス。 説明 Galaxy Watch アプリ「Samsung Internet for Galaxy Watch」バージョン 5.0.9（Samsung Galaxy Watch 3 まで利用可能）は、TLS 証明書を適切に検証しないため、攻撃者がユーザーが訪問するすべての Web...

CVE-2026-94089 D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow

A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfaauthentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed...

CVE-2026-94089

D-Link DIR-868L version 2.01b05 is affected by a stack-based buffer overflow in the strcpy function of the file /webfa_authentication.cgi , within the Authentication Handler component. Remote attackers with no privileges can trigger the overflow by manipulating the id/password argument, leading t...

CVE-2026-94048

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument roleid results in improper privilege management. The attack can be executed remotely. The exploit is...

CVE-2026-94049

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function renderslides of the file packages/cli/src/renderer.ts. This manipulation of the argument htmlPath causes path traversal. The attack is possible to be carried out remotely. The exploit has been published and may be...

CVE-2026-94047

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...

CVE-2026-94051 0717376 cowork_bench pdf-tools-mcp server.py ControlFlowNode server-side request forgery

A vulnerability was found in 0717376 coworkbench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulnerability is the function ControlFlowNode of the file localservers/pdf-tools-mcp/pdftoolsmcp/server.py of the component pdf-tools-mcp. Performing a manipulation of the argument...

CVE-2025-70342

CVE-2025-70342: erase-install における名前付きパイプを介した認証情報の傍受 概要 v40.4 より前の erase-install（コミット 2c31239）は、swiftDialog の認証情報出力をハードコードされたパス /var/tmp/dialog.json に書き込みます。Apple Silicon Mac では、再インストール/消去操作中に入力された管理者認証情報が、この予測可能でワールドライタブルな場所に書き込まれます。ローカルの非特権攻撃者は、このパスに名前付きパイプ（FIFO）を作成することで、管理者認証情報をリアルタイムに傍受できます。...

CVE-2026-94049 06ketan slideshot renderer.ts render_slides path traversal

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function renderslides of the file packages/cli/src/renderer.ts. This manipulation of the argument htmlPath causes path traversal. The attack is possible to be carried out remotely. The exploit has been published and may be...

CVE-2023-38408

CVE-2023-38408 CS-782攻撃プレゼンテーションのスライドとソースコード...

CVE-2026-94043

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzerdeps/free5gc/NFs/amf/internal/gmm/handler.go of the component Gmm Handler. This manipulation causes race condition. The attack can be initiated remotely. Patch name:...