CVE-2026-93349-frictionless-command-injection

CVE-2026-93349: Frictionless = 5.20.0rc1 explore OS Command Injection Severity: High, CVSS 3.1 8.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected: all Frictionless versions = 5.20.0rc1 Component: frictionless.console.commands.explore CWE: CWE-78 OS Command Injection, CWE-20 Imprope...

WebsitePanel before v1.2.2.1 - Open Redirect

Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx id: CVE-2012-4032 info: name: WebsitePanel before v1.2.2.1 - Open Redirect author:...

Podlove Podcast Publisher <= 4.5.1 - Arbitrary File Upload

Podlove Podcast Publisher plugin for WordPress through 4.5.1 is vulnerable to arbitrary file uploads due to missing file type validation in the podlovehandlecachefiles function. The image cache derives the stored file extension from the path of the attacker supplied source URL, while the image...

Apache Gravitino < 1.2.1 - Unauthenticated Remote Code Execution

Apache Gravitino 1.2.1 contains a remote code execution caused by unsanitized H2 JDBC URL via testConnection API using H2's INIT parameter, letting unauthenticated attackers execute arbitrary Java code remotely, exploit requires H2 usage. id: CVE-2026-41042 info: name: Apache Gravitino 1.2.1 -...

CVE-2026-49468

CVE-2026-49468 — LiteLLM — incorrect Host parsing Lab model of the vulnerable service + PoC. Works against the local stand and against your own device. Vulnerability Product: LiteLLM ; on a real device the port/path may differ — check the advisory. Detection Non-standard/composite Host values in...

CVE-2026-85312

CVE-2026-85312 — camel-core: saga hijacking via the Long-Running-Action header Runnable proof-of-concept reproducer for the Apache Camel vulnerability where camel-core's SagaProcessor selected the saga coordinator from the Long-Running-Action message header on every exchange. That header name...

Exploit for CVE-2026-85314

CVE-2026-85314 — camel-mail: MimeMultipart header injection...

Exploit for CVE-2026-85312

CVE-2026-85312 — camel-core: saga hijacking via the Long-Runn...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in Commons-io

Summary Commons-io is used by Worksoft Connective Automation Platform for IBM as part of Java jar file CVE-2021-29425 Vulnerability Details CVEID:CVE-2021-29425 DESCRIPTION: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like...

CVE-2026-76468

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76456

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76468 Cisco Meraki Hardening Release - Input Validation Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

EUVD-2026-94477

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76468 Cisco Meraki Hardening Release - Input Validation Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76468

This CVE identifies multiple vulnerabilities in Cisco Meraki software resulting from improper input validation (CWE-20). These issues were identified during a proactive internal security review by Cisco's networking engineering team and are addressed in a software hardening release . The high-sev...

EUVD-2026-94458

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76456

The Cisco NX-OS Software is affected by multiple vulnerabilities categorized under CWE-20 (Improper Input Validation) . These issues stem from the improper validation of special elements used in a command issue. The Cisco NX-OS engineering team identified these vulnerabilities through an internal...

CVE-2026-76456 Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Input Validation Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76456 Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Input Validation Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76468: Improper Input Validation

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...