dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters

A flaw was found in Dovecot. An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in. This action causes the server to consume excessive memory and CPU resources, leading to the termination of login processes and other active connections...

dovecot: Dovecot: Denial of Service in ManageSieve login process

A flaw was found in Dovecot. An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. This can lead to a denial of service for Sieve script management, affecting either the attacker's connection or all connections handled by t...

CVE-2026-109318 Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author

Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...

CVE-2026-109318 Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author

Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...

CVE-2026-109318

Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...

CVE-2026-109318

The Grav Git Sync plugin, versions 1.0.2 through 3.4.12 , is vulnerable to command injection when the gravuser or gravfull author modes are enabled. Authenticated content editors can execute OS commands by injecting shell substitutions into profile fields, such as username , full name , or email ...

EUVD-2026-97620

Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...

CVE-2026-109318 Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author

Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...

CVE-2026-109289 Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket

Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated...

Mobile Security Framework security vulnerabilities

The Mobile Security Framework version 4.5.2 has a security vulnerability. This vulnerability stems from the /downloaddata/, /api/v1/scan, and Dynamic Analyzer ADB integration module, where command injection is possible, potentially allowing for the execution of arbitrary commands...

Mistral AI Mistral Vibe processing logic error vulnerability

Mistral AI Mistral Vibe versions prior to 2.25.4 have a processing logic vulnerability. This vulnerability stems from bypassing command permissions. Attackers can exploit this by hiding commands within single-quoted variables and re-expanding them using the $var@P prompt conversion operator,...

Fortinet FortiSIEM path traversal vulnerability

Fortinet FortiSIEM versions 7.5.0, 7.4.0 to 7.4.2, 7.3.0 to 7.3.5, 7.2.0 to 7.2.7, 7.1.0 to 7.1.9, and 7.0.0 to 7.0.4 have a path traversal vulnerability. This vulnerability stems from improper restrictions on path names for restricted directories during path traversal. It may allow attackers to...

Marco Piovanello yt-dlp Web UI command injection vulnerability

Marco Piovanello’s yt-dlp Web UI versions 4.0.0 and earlier have a command injection vulnerability. This vulnerability stems from the Service.Formats JSON-RPC method’s improper handling of url parameters that start with a hyphen. It allows unauthenticated remote attackers to inject yt-dlp options...

Teltonika Networks RUTOS command injection vulnerability

Teltonika Networks’ RUTOS versions from 7.22 to 7.24.6, as well as versions from 7.25 to 7.25.2, and also versions from 7.22 to 7.25.2, along with Teltonika Networks’ TSWOS version from 1.9 to 1.10.4, have command injection vulnerabilities. These vulnerabilities stem from command injection in the...

KDE Dolphin command injection vulnerability

The KDE Dolphin versions 24.08.0 to 26.08.2 have a command injection vulnerability. This vulnerability stems from improper handling of special folder names in the path placeholder. Attackers can embed double quotes and shell metacharacters in directory names, bypassing the quotes in the...

NSPC911 rovr command injection vulnerability

NSPC911 rovr 0.10.3 and earlier versions have a command injection vulnerability. This vulnerability occurs when opening malicious file names on Windows that contain shell metacharacters like "&" via openfile, potentially leading to OS command injection and execution with user privileges...

Jumpserver code injection vulnerability

Versions of Jumpserver 4.10.17-lts and earlier contain a code injection vulnerability. This vulnerability stems from automated rendering based on Ansible, which allows attackers to evaluate template expressions under their control. Attackers with permission to create or execute affected automated...

Joseph Huckaby xyOps Cross-Site Scripting Vulnerability

Joseph Huckaby’s xyOps version 0.9.119 and earlier contain a cross-site scripting vulnerability. This vulnerability arises from the fact that the administrator’s Activity Log includes the item.user.fullname value in the HTML code without proper entity encoding. Additionally, the pixl-server-user...

[SECURITY] [DLA 4831-1] libgit2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4831-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 12, 2026 https://wiki.debian.org/LTS -...

CVE-2026-108895

A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argument MACaddr can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the...