CVE-2026-113738 R6410418 Jackrong-llm-finetuning-guide MTP weight_map qwen_mtp_gguf_pipeline.py extract_mtp_heads path traversal

A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extractmtpheads of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py of the component MTP weightmap Handler. The manipulation of the...

CVE-2026-113738 R6410418 Jackrong-llm-finetuning-guide MTP weight_map qwen_mtp_gguf_pipeline.py extract_mtp_heads path traversal

A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extractmtpheads of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py of the component MTP weightmap Handler. The manipulation of the...

EUVD-2026-106990

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2026-114038

A flaw in device-mapper-multipath allows a local user to trigger an out-of-bounds read by sending a command containing a format string with a trailing percent character to the multipath daemon . This vulnerability can result in information disclosure by exposing unintended daemon memory or cause ...

CVE-2026-113735

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlinksetrootpwd of the file /mnt/mtd/aoniipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...

CVE-2026-113706

A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/taskstore/inmemory.rs. The manipulation of the argument historyLength leads to information disclosure. The attack is possible to be carried out remotely. The identifier of t...

Exploit for CVE-2026-44714

B.A.B.E.F - A BITCOINJ AUTHENTICATION BYPASS EXPLOIT FRAMEWORK...

EUVD-2026-106988

A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function loginpreparehnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be...

CVE-2026-113736 D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password

A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function loginpreparehnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be...

CVE-2026-113736

The D-Link DHP-W610AV (firmware version 1.02EUb03 ) is vulnerable to a critical flaw in the HNAP Login component. Specifically, the login_prepare_hnap function within the etc/defnodes/defaultvalue.xml file can be manipulated. By manipulating the Password argument, an attacker can cause the config...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: emacs (UTSA-2026-142367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142367 advisory. A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenate...

Linux Distros Unpatched Vulnerability : CVE-2026-113340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-113082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-113867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies,...

PT-2026-120668

A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function save folder/delete folder/delete file/file rename/save files of the file admin class.php of the component Folder Management. This manipulation of the...

PT-2026-120647

The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat id as webhook:route name:delivery id and re-derives the authorizing route by splitting that string, so a route name containing a ":" resolves toolset authorization to a different, higher-privileged prefix...

PT-2026-120808

Name of the Vulnerable Software and Affected Versions leomoon-studios wiki-go versions prior to 1.9.2 Description Remote manipulation of the documentPath argument within the DeleteComment function of the Comment Deletion Handler component leads to path traversal. Path traversal is a condition whe...

Linux Distros Unpatched Vulnerability : CVE-2026-113322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML pag...

Linux Distros Unpatched Vulnerability : CVE-2026-113077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafte...

Linux Distros Unpatched Vulnerability : CVE-2026-113035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML pag...