CVE-2022-21668-Pipenv-RCE-vulnerability

CVE-2022-21668-Pipenv-RCE-vulnerability 1. Introduction In this document the Pipenv vulnerabilityCVE-2022-21668 is discussed in detail. The following sections cover the bug code in pipenv/utils.py file which opens up the door for various RCE attacks and also about the recent fix which validates...

POC-CVE-2023-3244

proof of concept for CVE-2023-3244 Hello, this is a simple Proof of Concept PoC for the CVE-2023-3244 vulnerability found in the WordPress plugin "comments-like-dislike". The vulnerability affects plugin versions up to and including 1.2.0. To exploit this vulnerability, you can refer to the Pytho...

CVE-2026-7465-Lab

CVE-2026-7465 - Spectra Gutenberg Blocks Local Lab Local Docker lab for analyzing and reproducing CVE-2026-7465 in the WordPress plugin Spectra Gutenberg Blocks ultimate-addons-for-gutenberg. This lab compares: vuln: Spectra 2.19.25 patched: Spectra 2.19.26 The proof is intentionally least-harm. ...

PT-2026-118041

Vikunja: API token scopes bypassed via task expand parameter comments, reactions, time entry counts in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...

UBUNTU-CVE-2026-98786

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: guard dcsink dereferences in MST mode validation dmdpmstisportsupportmode reads aconnector-dcsink-dsccaps... for the DSC branch-throughput check, and getconvfrlbw's HDMI-PCON FRL-bandwidth path reads...

PT-2026-117673

Name of the Vulnerable Software and Affected Versions Pillow versions 9.2.0 through 12.11.0 Description When saving a GIF with a long comment, the library performs quadratic copying. The get global header function repeatedly copies portions of comment data while assembling the global header, whic...

CVE-2026-91831: Improper Neutralization of CRLF Sequences

The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allowing users with Author-level access and above to inject arbitrary e-mail headers, such as a hidden Bcc, and to spoof the send...

PT-2026-117317

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content through public user profiles. Users are recommended to upgrade to version 2.0.3, which fixes the issue...

CVE-2026-109431: Missing Authorization

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers with no permission grants to access task comments and attachments by calling singular read and delete endpoints that...

AgenticVulHunter: Bringing Local Agentic Vulnerability Hunting to Your Terminal

Finding vulnerabilities early, before they can affect the production system, is important for reducing the risk of any software attacks. However, detecting vulnerabilities during secure code review is still difficult because the vulnerable code logic may depend on lines found across different...

PT-2026-117686

Name of the Vulnerable Software and Affected Versions Pillow versions 2.6.0 through 12.11.0 Description Argument injection occurs when invoking Ghostscript for EPS input. The EpsImagePlugin.Ghostscript function passes a caller-controlled input filename after the -f flag without converting it to a...

PT-2026-117656

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The FlashPix JPEG-tile decoder in the Pillow imaging library contains a flaw where decoded scanlines can be written beyond the allocated tile buffer. This occurs because FlashPix FPX JPEG decoding...

CVE-2026-79613: Exposure of Sensitive Information Through Data Queries

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content through public user profiles. Users are recommended to upgrade to version 2.0.3, which fixes the issue...

PT-2026-117647

Name of the Vulnerable Software and Affected Versions Pillow versions 2.0.0 through 12.9.9 Description A heap buffer overflow and stale-heap disclosure exist in the tiffWriteProc function when saving compressed TIFF data through libtiff to a target lacking a usable fileno, such as BytesIO. The...

PT-2026-117659

Name of the Vulnerable Software and Affected Versions Pillow versions 5.4.0 through 12.11.0 Description Pillow performs quadratic copying when parsing GIF comments. The GifImageFile. seek function repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame...

Red Hat: CVE-2026-112401: pillow: pillow: Denial of Service via crafted GIF comments

Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile.seek repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame zero is parsed during Image.open. An attacker can submi...

CVE-2026-98786

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: guard dcsink dereferences in MST mode validation dmdpmstisportsupportmode reads aconnector-dcsink-dsccaps... for the DSC branch-throughput check, and getconvfrlbw's HDMI-PCON FRL-bandwidth path reads...

PT-2026-117669

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The JPEG decoder in Pillow fails to verify the actual output width and component count after a scaling request is made. When an application uses draft or thumbnail to request downscaling of an 8-bit...

PT-2026-117251

The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allowing users with Author-level access and above to inject arbitrary e-mail headers, such as a hidden Bcc, and to spoof the send...

openSUSE 16 Security Update : bcel (openSUSE-SU-2026:22109-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22109-1 advisory. - CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser bsc1284400. - CVE-2026-105111: Class2HTML...