Joomla! Component JA Comment - Local File Inclusion Detection

A directory traversal vulnerability in the JA Comment comjacomment component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the JA Comment...

Joomla! Component MS Comment 0.8.0b - Local File Inclusion Detection

A directory traversal vulnerability in the Moron Solutions MS Comment commscomment component 0.8.0b for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerabili...

PT-2026-65670

Summary datamodel-code-generator is vulnerable to code injection when a developer passes an --extra-template-data file whose comment value contains a literal r carriage return. The comment variable is rendered into a Python comment in six built-in templates with no line-terminator escaping...

SUSE-SU-2026:3283-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...

ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors Via Adversarial Code Comments

Large language models are increasingly deployed for security-sensitive tasks such as vulnerability detection and code review. Their reliance on natural-language context embedded in source code exposes a previously underexplored attack surface: adversarial comments that can influence a detector's...

CVE-2026-66034

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...

CVE-2026-66034 libssh2 Heap Out-of-Bounds Read via publickey subsystem

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...

CVE-2024-58354

Cal.com (cal.com/cal.diy) is affected by a repository takeover via its GitHub Actions workflow. The pr.yml workflow uses pull_request_target and passes repo default write permissions to check-types.yml, which then dangerous-checks out the attacker PR and executes it (yarn install, package.json sc...

UBUNTU-CVE-2026-15037

Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under th...

CVE-2026-15037

Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under th...

CVE-2026-15037

CVE-2026-15037 affects Qt XML (QDom): improper output neutralization in comment, CDATA, and processing-instruction serialization from Qt 4.0.0 through 6.11. Untrusted text serialized into these nodes can inject arbitrary XML markup because node terminators aren’t escaped under the default Invalid...

CVE-2026-15037 XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization

Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under th...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through the RemoveDependency function. An attacker can modify issue dependencies and inject comments into private repositories by submitting a crafted request referencing the global issue ID of a private repository...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through the RemoveDependency function. An attacker can modify issue dependencies and inject comments into private repositories by submitting a crafted request referencing the global issue ID of a private repository...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through the RemoveDependency function. An attacker can modify issue dependencies and inject comments into private repositories by submitting a crafted request referencing the global issue ID of a private repository...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through the RemoveDependency function. An attacker can modify issue dependencies and inject comments into private repositories by submitting a crafted request referencing the global issue ID of a private repository...

Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content

Summary Gitea's issue and comment attachment update paths accept attachment UUIDs without verifying that each attachment belongs to the target issue/comment repository. If an authenticated attacker knows a victim attachment UUID, they can re-link that attachment to an attacker-controlled issue or...

CVE-2026-47417

Summary of vulnerability (CVE-2026-47417, PraisonAI Platform) : The comment endpoints POST /workspaces/{workspace_id}/issues/{issue_id}/comments and GET /workspaces/{workspace_id}/issues/{issue_id}/comments are gated by require_workspace_member only on the workspace, but the code paths do not ver...

CVE-2026-47417 praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The comment endpoints POST /workspaces/workspaceid/issues/issueid/comments and GET .../comments gate access on requireworkspacememberworkspaceid...

CVE-2026-47417 praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The comment endpoints POST /workspaces/workspaceid/issues/issueid/comments and GET .../comments gate access on requireworkspacememberworkspaceid...