CVE-2026-105251 vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...

sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

CVE-2026-105250 vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero

A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decodemsima of the file src/coding/imadecoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...

EUVD-2026-92276

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

CVE-2026-105238

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the...

CVE-2026-105245

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2026-105248

A security flaw exists in vgmstream up to version r2117 within the TXTP File Handler component. Specifically, the parse_params/txtp_parse function in the file src/meta/txtp_parser.c is vulnerable to an out-of-bounds write caused by malicious manipulation. This vulnerability may be exploited remot...

CVE-2026-105248 vgmstream TXTP File txtp_parser.c txtp_parse out-of-bounds write

A security flaw has been discovered in vgmstream up to r2117. This affects the function parseparams/txtpparse of the file src/meta/txtpparser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as...

EUVD-2026-92274

A security flaw has been discovered in vgmstream up to r2117. This affects the function parseparams/txtpparse of the file src/meta/txtpparser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as...

CVE-2026-105248 vgmstream TXTP File txtp_parser.c txtp_parse out-of-bounds write

A security flaw has been discovered in vgmstream up to r2117. This affects the function parseparams/txtpparse of the file src/meta/txtpparser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as...

CVE-2026-105247

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to a remote SQL injection vulnerability. The flaw exists in an unknown function within the file /reviewer_0/admins/assessments/Subject/btn_functions.php?action=course . An attacker can trigger the vulnerability by manipulating...

EUVD-2026-92273

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

CVE-2026-105247 SourceCodester Online Reviewer Management System btn_functions.php course sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

Improper Certificate Revocation Checking

mwiede jsch is vulnerable to improper certificate revocation checking. The vulnerability is due to improper validation of revoked keys in the getRevokedKeys function of KnownHosts.java, which allows a remote attacker to bypass certificate revocation checks by manipulating the knownhosts argument...

CVE-2026-105246

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to an SQL injection vulnerability within the /reviewer_0/admins/assessments/Subject/btn_functions.php?action=update file. An attacker can initiate this attack remotely by manipulating the Subject argument. The vulnerability al...

CVE-2026-105246 SourceCodester Online Reviewer Management System btn_functions.php update sql injection

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

CVE-2026-105246 SourceCodester Online Reviewer Management System btn_functions.php update sql injection

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

CVE-2026-105245 sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2026-105245

The sgl-project sglang library (up to version 0.5.21 ) contains a vulnerability in the HTTP Endpoint component, specifically within the server_info function of the python/sglang/srt/entrypoints/http_server.py file. Manipulation of the api_key argument can result in the cleartext transmission of s...

EUVD-2026-92264

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...