EUVD-2026-104483

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

CVE-2026-112195 FusionPBX Dialplan Editor dialplan.php os command injection

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

CVE-2026-112195

A flaw in the Dialplan Editor component of FusionPBX (versions up to 5.4.4/5.5.7/5.6.5 ) allows for OS command injection . The vulnerability resides in an unknown function within the file app/dialplans/resources/classes/dialplan.php. An attacker can execute this attack remotely via a manipulation...

CVE-2026-112195 FusionPBX Dialplan Editor dialplan.php os command injection

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

CVE-2026-112195

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

python: python: Arbitrary file deletion via race condition during temporary directory cleanup

A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...

EUVD-2026-104456

A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed...

CVE-2026-112190 Webkul Aureus ERP composer.json insertion of sensitive information into debugging code

A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed...

CVE-2026-112190

A security vulnerability exists in Webkul Aureus ERP up to version 1.6.0 . The issue stems from unknown processing of the composer.json file, which can be manipulated to insert sensitive information into debugging code. This vulnerability can be exploited remotely , and the exploit has been discl...

CVE-2026-112190 Webkul Aureus ERP composer.json insertion of sensitive information into debugging code

A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1. These vulnerabilities stem from issues with the Server: Optimiz...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from memory corruption in WebAppInstalls, which may allow remote attackers to read memory within a sandbox through a specially crafted HTML page...

Oracle GoldenGate security vulnerabilities

A security vulnerability exists in Oracle GoldenGate versions 21.3 through 21.23. This vulnerability stems from issues within the Vendor Access Module component and may allow low-privilege attackers to log in to Oracle GoldenGate Infrastructure, thereby gaining unauthorized access to critical dat...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in ContextualSearch; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code within a sandbox...

Oracle PeopleSoft Enterprise FIN Manufacturing Brazil security vulnerabilities

The Oracle PeopleSoft Enterprise FIN Manufacturing Brazil 9.1 version has a security vulnerability. This vulnerability stems from issues with the Integration component. It could allow low-privilege attackers to exploit the vulnerability by logging in as the user who operates the infrastructure on...

Oracle Product Lifecycle Analytics security vulnerability

Version 3.6.1 of Oracle Product Lifecycle Analytics contains a security vulnerability stemming from issues within the Installation Issues component. This vulnerability may allow privileged attackers to log in and execute infrastructure tasks, thereby unauthorizedly creating, deleting, or modifyin...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, versions 9.7.0 to 9.7.3 and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: GIS component. They may allow high-privilege attackers to access the system via various protocols, causing the MySQL Server and MySQL Cluster...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in CacheStorage, which may allow remote attackers to read memory within the sandbox via specially crafted HTML pages...

tox-dev filelock backend link vulnerability

The tox-dev filelock version 3.20.4 to 4.0.9 contains security vulnerabilities. These vulnerabilities stem from the way ReadWriteLock and AsyncReadWriteLock handle lock paths, which allow them to pass the final symbolic link to SQLite without being rejected. This may lead to other local users...

Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a vulnerability related to permission escalation and access control. This issue stems from improper access control within ComputePressure; remote attackers can exploit it by using specially crafted HTML pages to bypass web source policies...