CVE-2019-19919

CVE-2019-19919 Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' Vulnerability pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Enter the target URL: Exploit Expected Output : Ente...

CVE-2026-61708

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, POST /api/agentdatastore/upload in backend/app/datastore/datastoreroutes.py permits customeruser callers to choose bucketname and objectname without an allowlist, tenant prefix...

CVE-2026-44344

Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, and the 2.x line before 2.0.1, multiple eval calls in the vendored PEAR HTMLQuickForm libraries can execute arbitrary PHP code if form element names contain attacker-influenced data. Standard Chamilo forms u...

CVE-2026-119722 Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in readstruct that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so field reads, writes, and pointer...

CVE-2026-119722

Blender versions before 4.5.15 and 5.x before 5.2.3 are susceptible to a heap out-of-bounds access vulnerability within the read_struct() function. The root cause is a failure to perform adequate size validation when a .blend file's SDNA struct layout compares as equal. An attacker can provide a ...

EUVD-2026-114127

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in readstruct that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so field reads, writes, and pointer...

CVE-2026-119722 Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in readstruct that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so field reads, writes, and pointer...

EUVD-2026-114124

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumbdataverticalflip. Attackers can craft a .blend file with malicious TEST block dimensions that trigger an out-of-bounds write whe...

CVE-2026-119719 Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumbdataverticalflip. Attackers can craft a .blend file with malicious TEST block dimensions that trigger an out-of-bounds write whe...

CVE-2026-119719

Blender versions before 4.5.15 and 5.x before 5.2.3 are vulnerable to a heap buffer overflow within the blend file thumbnail extractor. The root cause is a 32-bit integer overflow in the thumb_data_vertical_flip() function. An attacker can craft a malicious .blend file with specific TEST block di...

CVE-2026-119718

Blender versions before 4.5.15 and 5.x before 5.2.3 are vulnerable to a heap buffer overflow within the ptcache_data_alloc() function. This flaw is caused by an integer overflow occurring during the processing of point cache files . An attacker can leverage this by providing a crafted point cache...

CVE-2026-119718 Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcachedataalloc when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value alongside a .blend file to crash Blender or execute...

EUVD-2026-114123

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcachedataalloc when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value alongside a .blend file to crash Blender or execute...

CVE-2026-119718 Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcachedataalloc when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value alongside a .blend file to crash Blender or execute...

EUVD-2026-114121

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string litera...

EUVD-2026-114122

pybars4 through 0.9.13 contains a code injection vulnerability in pybars/compiler.py that allows attackers to execute Python code via unescaped bracketed path segments in Handlebars templates. Attackers can supply a template with a crafted segment in a helper or block argument to break out of the...

CVE-2026-119713

Paperclip versions 2026.403.0 before 2026.416.0 are vulnerable to Remote Code Execution (RCE) due to an OS Command Injection flaw (CWE-78). Agent API key holders can utilize the PATCH /api/execution-workspaces/:id endpoint to set arbitrary cleanupCommand and teardownCommand values. When a workspa...

CVE-2026-119713 Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands

Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, cleanupExecutionWorkspaceArtifacts runs these commands through...

EUVD-2026-114118

Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, cleanupExecutionWorkspaceArtifacts runs these commands through...

CVE-2026-119713 Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands

Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, cleanupExecutionWorkspaceArtifacts runs these commands through...