CVE-2026-83536

A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential timeout settings, such as ReadHeaderTimeout. This vulnerability allows an unauthenticated, remote attacker to initiate multiple slow HTTP header connections. By trickling header...

CVE-2026-108921

A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This impacts the function mysqlquery of the file removeannouncements.php of the component State-Changing Endpoints. Performing a manipulation of the argument ID results in missi...

CVE-2026-108920

A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/userrecord.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The attack can be launch...

CVE-2026-105464

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-108362 Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)

Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized platform identity. When a network attacker can forge evidence...

CVE-2026-108362 Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)

Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized platform identity. When a network attacker can forge evidence...

CVE-2026-108362

Privasys Remote Attestation TLS Clients versions prior to 0.11.0 are vulnerable to a diversion attack due to an Origin Validation Error (CWE-346). The software fails to require an explicitly authorized platform identity, meaning it accepts TEE attestation evidence from any unrevoked platform. A n...

CVE-2026-108922

A flaw in the KusalkaSilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2 ) allows for unrestricted upload of files. The vulnerability exists in the getimagesize function of the upload_save.php file, where a manipulation of the uploaded_file/image argument can b...

CVE-2026-83536 Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris)

A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential timeout settings, such as ReadHeaderTimeout. This vulnerability allows an unauthenticated, remote attacker to initiate multiple slow HTTP header connections. By trickling header...

CVE-2026-83536

A flaw in openstack-network-exporter allows an unauthenticated, remote attacker to perform a Slowloris-style Denial of Service (DoS) attack. The HTTP server component lacks essential timeout settings, such as ReadHeaderTimeout , enabling an attacker to initiate multiple slow HTTP header connectio...

EUVD-2026-97770

A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This impacts the function mysqlquery of the file removeannouncements.php of the component State-Changing Endpoints. Performing a manipulation of the argument ID results in missi...

CVE-2026-108921

The KusalkaSilva Learning-Management-System is vulnerable to a missing authentication flaw in the State-Changing Endpoints component. Specifically, the mysql_query function within the remove_announcements.php file fails to properly authenticate requests when the ID argument is manipulated. This v...

CVE-2026-108920

The SourceCodester Drug Recommendation System 1.0 is vulnerable to cross-site scripting (XSS) within the Admin Record Tables component. The vulnerability exists in an unspecified function of the Admin/user_record.php file, where the manipulation of the name/email argument allows for remote execut...

CVE-2026-108915

A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was...

CVE-2026-108916

A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and...

CVE-2026-108916

The Edimax BR-6208AC (version 1.32) is susceptible to a remote command injection vulnerability within the /goform/formAccept file. This issue stems from improper neutralization of input in the submit-url argument, allowing an attacker to execute arbitrary commands remotely. Public exploits for th...

Symlink Attack

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Symlink Attack

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

Symlink Attack

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Symlink Attack

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...