EUVD-2026-83815

A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/sitepagePHP.php of the component Frontend Rendering. Such manipulation of the argument content leads to code injection. The attack can be launched remotely. The exploit has been...

PT-2026-104827

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

PT-2026-96114

Name of the Vulnerable Software and Affected Versions libXrender versions prior to 0.9.13 Description A heap overflow occurs in the RenderQueryPictFormats function. This flaw allows malicious X servers to inject code into attached X clients. A heap overflow is a memory corruption issue where a...

PT-2026-96022

Name of the Vulnerable Software and Affected Versions RooCMS versions 1.2.2 and earlier RooCMS versions 1.3.4 and earlier RooCMS versions 1.4RC2 and earlier Description A code injection issue exists in the Frontend Rendering component within the eval function of the roocms/site pagePHP.php file. ...

CVE-2026-88807: Heap-based Buffer Overflow

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

CVE-2026-94103: Improper Control of Generation of Code

A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/sitepagePHP.php of the component Frontend Rendering. Such manipulation of the argument content leads to code injection. The attack can be launched remotely. The exploit has been...

CVE-2026-94004

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2026-94004 DedeCMS mytag_js.php code injection

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2026-94004 DedeCMS mytag_js.php code injection

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...

EUVD-2026-83732

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2026-94004

DedeCMS versions up to 5.7.118 are affected by a code injection vulnerability in the file plus/mytag_js.php . The root cause is the manipulation of the aid argument within an unknown function of that file. The vulnerability is exploitable remotely with no privileges and no user interaction requir...

PT-2026-95960

Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7.119 Description A remote code injection issue exists in the file plus/mytag js.php. The flaw allows an attacker to execute arbitrary code by manipulating the aid argument within an unknown function of that file...

CVE-2026-94004: Improper Control of Generation of Code

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...

Exploit for CVE-2026-18937

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-92807 Save as PDF Plugin by PDFCrowd <= 4.6.1 - Authenticated (Contributor+) Arbitrary Function Invocation / Code Injection via 'pdf_created_callback' Shortcode Attribute

The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function Invocation in all versions up to, and including, 4.6.1 via the pdfcreatedcallback shortcode attribute. The evalshortcode function copies any non-button/non-email shortcode attribute verbatim into a custom...

CVE-2026-92807

The Save as PDF Plugin by PDFCrowd for WordPress (≤ 4.6.1) is vulnerable to arbitrary function invocation via the pdf_created_callback shortcode attribute. The eval_shortcode() function copies attacker-supplied attributes into an options array without sanitization or allowlist enforcement. When t...

databases/p5-DBI -- multiple vulnerabilities

DBI project reports: DBI 1.650, 1.651, 1.652, 1.653 and 1.654 fix the following issues: CVE-2026-88815: Fix DBI::sqltypecast on IV/NV CVE-2026-88816: Fix FetchHashKeyName on IV/NV CVE-2026-78030: Fix arbitrary module and file loading via dbmtype/dbmmldbm CVE-2026-15392: Tighten symlink outside of...

CVE-2026-33625

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1 through 0.12.2 contain a code injection vulnerability in lmdeploy/pytorch/config.py line 620 that allows an attacker to execute arbitrary Python code by publishing a malicious HuggingFace model wit...

CVE-2026-81180 SysReptor: Authenticated RCE by insecure image processing

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...

CVE-2026-33625 LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1 through 0.12.2 contain a code injection vulnerability in lmdeploy/pytorch/config.py line 620 that allows an attacker to execute arbitrary Python code by publishing a malicious HuggingFace model wit...