193601 matches found
CVE-2026-92263 SparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restore
SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup/restore endpoint interpolates an uploaded filename into a shell command. An authenticated global administrator uploads a restore archive with a crafted filename. The...
CVE-2026-92263
The SparkyFitness health and fitness tracker is vulnerable to OS command injection in versions prior to 1.6.0 . The flaw exists in the api/admin/backup/restore endpoint, where the application interpolates an uploaded filename directly into a shell command. An authenticated global administrator ca...
CVE-2026-96425 Incorrect Permission Assignment for Critical Resource in lomiri-download-manager
Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus...
CVE-2026-96425 Incorrect Permission Assignment for Critical Resource in lomiri-download-manager
Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus...
CVE-2026-96425
The lomiri-download-manager software contains an incorrect DBus policy that allows an arbitrary user to execute arbitrary commands with root privileges over DBus. This vulnerability is classified under CWE-732 (Incorrect Permission Assignment for Critical Resource). The provided documents do not ...
CVE-2026-96425
Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus...
CVE-2026-96425 Incorrect Permission Assignment for Critical Resource in lomiri-download-manager
Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus...
CLSA-2026-1792154919 Fix CVE(s): CVE-2026-106553, CVE-2026-106555, CVE-2026-106583
SECURITY UPDATE: GSSAPI client state persisting across authentication attempts - debian/patches/CVE-2026-106555.patch: reset the GSSAPI client state at the start of each userauth request and of each pre-authentication GSSAPI context setup in the monitor. - CVE-2026-106555 SECURITY UPDATE: GSSAPI...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-84064 DESCRIPTION: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special...
SUSE CVE-2026-104024
Incomplete List of Disallowed Inputs CWE-184 in the dangerous-extension confirmation of the archive object viewer peach.pas, gridobjopen in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitrary...
CLSA-2026-1792153017 vim: Fix of 91 CVEs
CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries upstream 9.2.0840...
lrzsz security, bug fix, and enhancement update
An update is available for lrzsz. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Lrzsz consisting of lrz and lsz is a cosmetically modified zmodem/ymodem/xmodem...
RLSA-2026:83525 Important: lrzsz security, bug fix, and enhancement update
Lrzsz consisting of lrz and lsz is a cosmetically modified zmodem/ymodem/xmodem package built from the public-domain version of the rzsz package. Lrzsz was created to provide a working GNU copylefted Zmodem solution for Linux systems. Security Fixes: lrzsz: lrzsz: Arbitrary file overwrite via...
BIT-GITLAB-2026-96893 Improper Neutralization of Input Used for LLM Prompting in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing...
BIT-ARGO-CD-2026-55797 Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port are...
WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action vulnerability
Authenticated Custom+ Command Injection via 'value' Parameter crop item in update-photo AJAX Action vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Photo Album Plus versions = 9.3.02.002...
CVE-2026-94169
Improper Control of Generation of Code 'Code Injection' vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1...
CVE-2026-92115
The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action. This is due to insufficient shell escaping within the wppaimagemagicka function, where the...
