CVE-2026-112377

The CCC Attestation SIG attested-tls-poc (through commit 731ca82 ) is vulnerable to an Attestation Relay Attack due to a failure to bind early attestation Evidence to the TLS connection. An attacker who has extracted an attested TLS private key can forward a relying party's nonce to a genuine att...

DoS (Denial of Service) org.jsoup:jsoup Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 7.2.2 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to expose assets in...

DoS (Denial of Service) org.apache.httpcomponents.core5:httpcore5-h2 Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to expose assets in...

CVE-2026-112190

A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed...

CVE-2026-112195

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

CVE-2026-112247 Wuxi Wubang Security Software Five-in-One Safety Production Management Information System Upload Endpoint upload.aspx cross site scripting

A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...

CVE-2026-112247 Wuxi Wubang Security Software Five-in-One Safety Production Management Information System Upload Endpoint upload.aspx cross site scripting

A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...

CVE-2026-112247

A weakness exists in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System (up to version 3.5 ) affecting the Upload Endpoint component. Specifically, an unknown function in the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx is vulnerable to Cro...

CVE-2026-112195

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

CVE-2026-112195 FusionPBX Dialplan Editor dialplan.php os command injection

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

EUVD-2026-104483

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

CVE-2026-112195

A flaw in the Dialplan Editor component of FusionPBX (versions up to 5.4.4/5.5.7/5.6.5 ) allows for OS command injection . The vulnerability resides in an unknown function within the file app/dialplans/resources/classes/dialplan.php. An attacker can execute this attack remotely via a manipulation...

CVE-2026-112195 FusionPBX Dialplan Editor dialplan.php os command injection

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

python: python: Arbitrary file deletion via race condition during temporary directory cleanup

A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...

CVE-2026-112190

A security vulnerability exists in Webkul Aureus ERP up to version 1.6.0 . The issue stems from unknown processing of the composer.json file, which can be manipulated to insert sensitive information into debugging code. This vulnerability can be exploited remotely , and the exploit has been discl...

CVE-2026-112190 Webkul Aureus ERP composer.json insertion of sensitive information into debugging code

A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed...

EUVD-2026-104456

A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed...

CVE-2026-112190 Webkul Aureus ERP composer.json insertion of sensitive information into debugging code

A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed...

Open Source Social Network: Input validation error vulnerability

The Open Source Social Network versions 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 9.7, 9.8, 9.9, 9.10, 9.11, 10.0, and 10.1 have security vulnerabilities. These vulnerabilities stem from improper handling of parameters such as host, port, username, password, type, and status in the...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, including the MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have security vulnerabilities. These vulnerabilities stem from issues with the ...