306814 matches found
CVE-2026-105163
A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in crossplane-runtime up to versions 2.2.2 and 2.3.2 . The flaw specifically affects the Get function within the pkg/xpkg/client.go file of the ImageConfig component. This issue may be exploited via a remote attack vector. T...
CVE-2026-95309
An ui misrepresentation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533074595...
CVE-2026-95358
An incorrect authorization flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553141660...
CVE-2026-105161
A flaw exists in invariant-systems-ai aiir versions up to 1.7.0 within the Policy Gate Handler component. This vulnerability allows for improper verification of cryptographic signatures through an unknown function, which can be triggered via a remote manipulation. The impact includes potential in...
CVE-2026-105161 invariant-systems-ai aiir Policy Gate signature verification
A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...
EUVD-2026-92118
A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...
CVE-2026-105161 invariant-systems-ai aiir Policy Gate signature verification
A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...
Exploit for Improper Validation of Consistency within Input in Linux Linux_Kernel
copyfail-check !CIhttps://github.com/ledlight33/copyfail-...
CVE-2026-105158
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...
CVE-2026-105156
A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launch...
CVE-2026-105148
A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...
CVE-2026-105158
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...
CVE-2026-105158 RainyGao DocSys Database Management BaseController.java BaseController.createDBForMysql sql injection
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...
CVE-2026-105158
A SQL injection vulnerability exists in RainyGao DocSys versions up to 2.02.85 within the Database Management component. The flaw is located in the BaseController.createDBForMysql function of the BaseController.java file, where improper handling of the url argument allows for remote code executio...
CVE-2026-105156
A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launch...
CVE-2026-105156
A weakness in YzmCMS up to version 7.6 affects the Password function within the /common/function/system.func.php file of the MD5 Handler component. A remote attacker can manipulate the pass argument to generate password hashes with insufficient computational effort (CWE-916, CWE-326). While the a...
CVE-2026-105156 YzmCMS MD5 system.func.php password weak password hash
A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launch...
EUVD-2026-92096
A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launch...
CVE-2026-105148 SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery
A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...
CVE-2026-105148
A server-side request forgery (SSRF) vulnerability exists in SciPhi-AI R2R versions up to 3.6.6 . The flaw is located in the Retrieval Completion API Endpoint within the file py/shared/abstractions/llm.py. Specifically, manipulation of the generation_config.api_base argument allows for remote exe...