Node.js foregroundChild() Code Execution

The vulnerability of the foregroundChild function in the Node.js software platform’s file and directory searching library is related to the improper handling of the shell parameter in .bat and .cmd files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

[SECURITY] Fedora 43 Update: sad-0.4.32-4.fc43

Space Age seD - Batch File Edit tool. It will show you a really nice diff of proposed changes before you commit them...

This Week in Spring - February 10th, 2026

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's February 10th, 2026, as I write this from lovely London, UK. I spoke at the local Java User Group here last night, had a wonderful time. Tomorrow, I'm going home. It's been fun, but it's time to conclude this roller...

PT-2026-34888

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB server component where the send done function needs to handle completions that lack the IB SEND SIGNALED flag. During smbdirect send batch processing, requests...

CVE-2025-13818

Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management Agent...

CVE-2026-2107

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\LoginfoController.java of the component Log Info...

CVE-2026-2107

CVE-2026-2107 affects yeqifu warehouse (Log Info Handler). Multiple methods in LoginfoController (loadAllLoginfo, deleteLoginfo, batchDeleteLoginfo) enable improper authorization, with remote exploit capability. Public exploit exists; product uses no versioning, so affected/unaffected releases ar...

CVE-2026-2107 yeqifu warehouse Log Info LoginfoController.java batchDeleteLoginfo improper authorization

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\LoginfoController.java of the component Log Info...

EUVD-2026-5720

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\LoginfoController.java of the component Log Info...

CVE-2026-2106

The CVE-2026-2106 entry relates to yeqifu warehouse, affecting the Notice Management component. The exposed flaw is in NoticeController.java functions addNotice, updateNotice, deleteNotice, and batchDeleteNotice, causing improper authorization and enabling remote exploitation. Publicly disclosed ...

CVE-2026-2106 yeqifu warehouse Notice Management NoticeController.java batchDeleteNotice improper authorization

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacted element is the function addNotice/updateNotice/deleteNotice/batchDeleteNotice of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\NoticeController.java of the...

CVE-2026-2106 yeqifu warehouse Notice Management NoticeController.java batchDeleteNotice improper authorization

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacted element is the function addNotice/updateNotice/deleteNotice/batchDeleteNotice of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\NoticeController.java of the...

CVE-2026-2106

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacted element is the function addNotice/updateNotice/deleteNotice/batchDeleteNotice of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\NoticeController.java of the...

warehouse 授权问题漏洞

Warehouse is a small-scale warehouse logistics management system developed by Yeqifu’s individual developer, based on Spring Boot. There are authorization issues in Warehouse; these issues stem from incorrect operations in the component Log Info Handler, specifically in the file...

PT-2026-6914

Name of the Vulnerable Software and Affected Versions yeqifu warehouse versions prior to aaf29962ba407d22d991781de28796ee7b4670e4 Description A flaw exists within the Notice Management component of yeqifu warehouse, specifically in the addNotice, updateNotice, deleteNotice, and batchDeleteNotice...

org.neo4j.assembly:neo4j-community-standalone (4.2.7), org.neo4j.community:algo-it (4.2.7) +18 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (4.2.7)

org.neo4j:neo4j MAVEN version 4.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.assembly:neo4j-community-standalone 4.2.7 - org.neo4j.community:algo-it 4.2.7 - org.neo4j.community:batch-insert-it 4.2...

org.neo4j.assembly:neo4j-community-standalone (4.3.1), org.neo4j.community:algo-it (4.3.1) +13 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (4.3.1)

org.neo4j:neo4j MAVEN version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.assembly:neo4j-community-standalone 4.3.1 - org.neo4j.community:algo-it 4.3.1 - org.neo4j.community:batch-insert-it 4.3...

org.neo4j.assembly:neo4j-community-standalone (4.3.4), org.neo4j.community:algo-it (4.3.4) +13 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (4.3.4)

org.neo4j:neo4j MAVEN version 4.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.assembly:neo4j-community-standalone 4.3.4 - org.neo4j.community:algo-it 4.3.4 - org.neo4j.community:batch-insert-it 4.3...

org.neo4j.assembly:neo4j-community-standalone (4.3.20), org.neo4j.community:algo-it (4.3.20) +13 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (4.3.20)

org.neo4j:neo4j MAVEN version 4.3.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.assembly:neo4j-community-standalone 4.3.20 - org.neo4j.community:algo-it 4.3.20 - org.neo4j.community:batch-insert-it...

org.neo4j.assembly:neo4j-community-standalone (4.3.21), org.neo4j.community:algo-it (4.3.21) +13 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (4.3.21)

org.neo4j:neo4j MAVEN version 4.3.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.assembly:neo4j-community-standalone 4.3.21 - org.neo4j.community:algo-it 4.3.21 - org.neo4j.community:batch-insert-it...