26415 matches found
CVE-2026-4200
A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This affects the function uploadTestcaseZipUrl of the file business/business-oj/src/main/java/com/glowxq/oj/problem/controller/ProblemCaseController.java. Performing a manipulation results in...
PT-2026-29735
Name of the Vulnerable Software and Affected Versions ShareFile Storage Zones Controller SZC affected versions not specified Description An access control flaw in the Customer Managed ShareFile Storage Zones Controller SZC allows an unauthenticated attacker to access restricted configuration page...
PT-2026-25576
Name of the Vulnerable Software and Affected Versions glowxq glowxq-oj affected versions not specified Description A weakness exists in glowxq glowxq-oj. This issue affects the Upload function within the file...
LoongArch Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the sendipidata function in the arch/loongarch/kvm/intc/ipi.c module, which is part of the LoongArch architecture support for the Linux operating system, relates to memory writing beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to cause a...
Craft CMS security vulnerability
Craft CMS is an open-source content management system developed by Craft CMS. Vulnerabilities existed in versions 4.0.0-RC1 to 4.17.5, as well as in versions 5.0.0-RC1 to 5.9.11 of Craft CMS. These vulnerabilities were caused by behavior injection remote code execution vulnerabilities in the...
glowxq-oj code issue vulnerabilities
Glowxq-oj is an online problem-solving system developed by Glowxq’s individual developers, which supports multi-language evaluations and engaging programming activities. There are code vulnerabilities in Glowxq-oj. These vulnerabilities stem from incorrect operations on the function...
PT-2026-25804
Name of the Vulnerable Software and Affected Versions Craft CMS versions 5.6.0 through 5.9.10 Description Craft CMS is a content management system. A flaw exists where the $settings array from parse str is passed directly to Craft::configure without proper sanitization using...
SSCMS SQL Injection Vulnerability
SSCMS SiteServerCMS is a content management system developed by SSCMS Corporation in China. Version 7.4.0 of SSCMS contains an SQL injection vulnerability. This vulnerability stems from improper handling of the tableHandWrite parameter in the SitesAddController.Submit.cs file of the DDL Handler...
glowxq-oj code issue vulnerabilities
Glowxq-OJ is an online problem-solving system developed by Glowxq’s individual developers, which supports multi-language evaluations and engaging programming activities. There are code vulnerabilities in Glowxq-OJ. These vulnerabilities stem from incorrect operations related to the function Uploa...
Linux GPIO Controller Heap Buffer Overflow DoS
The vulnerability of the k230pinctrlprobe function in the drivers/pinctrl/pinctrl-k230.c driver for Linux kernel’s PINCTRL output controllers relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
SQL Injection
Craft CMS is vulnerable to SQL Injection. The vulnerability is due to missing input sanitization in the ElementSearchController::actionSearch endpoint, which allows an attacker to inject malicious SQL queries via parameters like criteriawhere or criteriaorderBy and extract sensitive database...
EUVD-2026-12173
PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, An unauthenticated path traversal vulnerability in the PX4 Autopilot MAVLink FTP implementation allows any MAVLink peer to read, write, create, delete, and rename arbitrary files on the flight controller filesystem withou...
CVE-2026-32707
PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, tattucan contains an unbounded memcpy in its multi-frame assembly loop, allowing stack memory overwrite when crafted CAN frames are processed. In deployments where tattucan is enabled and running, a CAN-injection-capable...
EUVD-2026-12152
PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, tattucan contains an unbounded memcpy in its multi-frame assembly loop, allowing stack memory overwrite when crafted CAN frames are processed. In deployments where tattucan is enabled and running, a CAN-injection-capable...
MINI-MC35-4FH7-RC92
Bulletin has no description...
PT-2026-25394
PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, An unauthenticated path traversal vulnerability in the PX4 Autopilot MAVLink FTP implementation allows any MAVLink peer to read, write, create, delete, and rename arbitrary files on the flight controller filesystem withou...
PT-2026-25389
PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, The crsf rc parser accepts an oversized variable-length known packet and copies it into a fixed 64-byte global buffer without a bounds check. In deployments where crsf rc is enabled on a CRSF serial port, an...
CVE-2026-28253
CVE-2026-28253 affects Trane Tracer SC, Tracer SC+, and Tracer Concierge with a Memory Allocation with Excessive Size Value vulnerability that could allow an unauthenticated attacker to cause a denial-of-service. The issue is described in public sources (NVD/CVE records) with a CVSS 4.0 base scor...
BIT-NGINX-INGRESS-CONTROLLER-2026-3288 ingress-nginx rewrite-target nginx configuration injection
A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/rewrite-target Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible t...
PT-2026-30169
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw where controller per-cpu statistics were not allocated until after the controller was registered, creating a window where accessing sysfs attributes cou...