org.apache.syncope.client.am:syncope-client-am-console (>=3.0.0-m0, <=3.0.15), org.apache.syncope.client.am:syncope-client-am-enduser (>=3.0.12, <=3.0.15) +14 more potentially affected by CVE-2026-23794 via org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui (>=3.0.0-m0, <=3.0.15)

org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.12, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.15 - org.apache.syncope.ext.saml2sp4ui:syn...

CVE-2020-37110

60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modif...

CVE-2020-37110

60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modif...

CVE-2020-37110

60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modif...

CVE-2020-37110

60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows manipulation of database queries via unvalidated input (e.g., the 'title' parameter). Impact includes potential data extraction or modification (confidentiality and integrity). Root cause: unvalida...

EUVD-2020-30985

60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modif...

arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2026-1312 via django (>=5.2.0a1, <=5.2.10)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2026-1312 Source advisory: SNYK:PYTHON-DJANGO-15198931...

arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2025-14550 via django (>=5.2.0a1, <=5.2.10)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2025-14550 Source advisory: SNYK:PYTHON-DJANGO-15198929...

arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2026-1285 via django (>=5.2.0a1, <=5.2.10)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2026-1285 Source advisory: OSV:GHSA-4RRR-2H4V-F3J9...

DEBIAN-CVE-2026-1285

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. django.utils.text.Truncator.chars and Truncator.words methods with html=True and the truncatecharshtml and truncatewordshtml template filters allow a remote attacker to cause a potential denial-of-service via...

arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +59 more potentially affected by CVE-2025-14550 via django (>=5.2.0, <=5.2.10)

django PYPI version =5.2.0, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2025-14550 Source advisory: OSV:PYSEC-2026-43...

org.apache.syncope.client.am:syncope-client-am-console (>=4.0.0, <=4.0.3), org.apache.syncope.client.am:syncope-client-am-enduser (>=4.0.0, <=4.0.3) +12 more potentially affected by CVE-2026-23794 via org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui (>=4.0.0, <=4.0.3)

org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0,...

org.apache.syncope.client.am:syncope-client-am-console (>=3.0.0, <=3.0.15), org.apache.syncope.client.am:syncope-client-am-enduser (>=3.0.12, <=3.0.15) +13 more potentially affected by CVE-2026-23794 via org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui (>=3.0.0, <=3.0.15)

org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui MAVEN version =3.0.0, =3.0.0, =3.0.12, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.15 - org.apache.syncope.ext.saml2sp4ui:syncope-ext-saml2sp4...

urllib3: urllib3 Streaming API improperly handles highly compressed data

A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header e.g., gzip, deflate, br, or zstd. The library must read compressed data from the network and decompress it...

BELL-CVE-2026-23018

Bulletin has no description...

CVE-2025-12773

creationtimestamp| type| source ---|---|--- 2026-02-03 03:17:21+00:00| seen| Telegram/CgBosmGjiUsFubMTPyQoIc-fq6HoQhesjtq1xv5gYNaUJw...

Linux arch/arm64/mm/pageattr.c Heap Buffer Overflow DoS

The vulnerability of the changememorycommon function in the arch/arm64/mm/pageattr.c module of the Linux operating system is related to the lack of checking of the returned value. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibilit...

CVE-2020-37110: Improper Neutralization of Special Elements used in an SQL Command

60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modif...

PT-2026-5855

Name of the Vulnerable Software and Affected Versions 60CycleCMS version 2.5.2 Description The software contains an SQL injection issue in the 'news.php' and 'common/lib.php' files. Attackers can manipulate database queries through unvalidated user input. Specifically, the 'title' parameter is...

60CycleCMS SQL Injection Vulnerability

60CycleCMS is an open-source content management system developed by 60CycleCMS. Version 2.5.2 of 60CycleCMS has a SQL injection vulnerability. This vulnerability stems from SQL injections in the news.php and common/lib.php files, which could allow attackers to manipulate database queries with...