CVE-2026-102781 Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6

Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider 5.4.6 - modOsTouchSliderHelper::getAjax, wired through Joomla’s core comajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to JFactory::getUser,...

CVE-2026-102781 Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6

Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider 5.4.6 - modOsTouchSliderHelper::getAjax, wired through Joomla’s core comajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to JFactory::getUser,...

CVE-2026-76969: Insufficiently Protected Credentials

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...

GO-2026-6261 Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import in github.com/dgraph-io/dgraph

Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port without authentication or authorization. An unauthenticated network client can call StreamExtSnapshot and send Badger stream data to replace a target group's store, which drops and replaces the existing databa...

PT-2026-82016

Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port without authentication or authorization. An unauthenticated network client can call StreamExtSnapshot and send Badger stream data to replace a target group's store, which drops and replaces the existing databa...

GHSA-RRWH-6JRQ-WP5V Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import

Summary Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port :9080 without authentication or authorization. As a result, an unauthenticated network client can open StreamExtSnapshot and send Badger stream data to the target group’s store. In addition, the receiv...

CVE-2026-63685

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially...

The vulnerability affects the classes HAProxyMessage and HAProxyMessageEncoder of the Netty framework, which is used for developing network applications, servers, and client protocols. This vulnerability allows an attacker to replace the original data with malicious content.

The vulnerability of the HAProxyMessage and HAProxyMessageEncoder classes in the Netty framework for developing network applications, servers, and clients is related to the failure to handle CRLF sequences properly. Exploiting this vulnerability can allow an attacker to replace legitimate data wi...

The vulnerability of NVIDIA’s ONNX library allows for the execution of arbitrary code, granting attackers enhanced privileges, unauthorized access to protected information, and the ability to replace data.

The vulnerability of the ONNX library’s Model Optimizer function relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain enhanced privileges, obtain unauthorized access to protected information, and replace data...

The vulnerability of the Webview API in the Visual Studio Code editor allows attackers to replace data and perform cross-site scripting (XSS) attacks.

The vulnerability of the Webview API of the Visual Studio Code editor is related to errors in information representation by the user interface. Exploiting this vulnerability could allow a remote attacker to replace data and perform cross-site scripting attacks...

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing lies in its ability to restore unreliable data in memory. This allows attackers to execute arbitrary code, gain unauthorized access to protected information, and replace data.

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing is related to the recovery of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain...

The vulnerability of the training library for NVIDIA Megatron-LM, related to the restoration of unreliable data in memory, allows attackers to execute arbitrary code, gain unauthorized access to protected information, and replace data.

The vulnerability of the NVIDIA Megatron-LM training library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized access to protected information, and replace data using ...

The vulnerability of the training library for NVIDIA Megatron-LM, related to the restoration of unreliable data in memory, allows attackers to execute arbitrary code, gain unauthorized access to protected information, and replace data.

The vulnerability of the NVIDIA Megatron-LM training library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized access to protected information, and replace data using ...

The vulnerability of the training library for NVIDIA Megatron-LM, related to the restoration of unreliable data in memory, allows attackers to execute arbitrary code, gain unauthorized access to protected information, and replace data.

The vulnerability of the NVIDIA Megatron-LM training library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized access to protected information, and replace data...

The vulnerability of the training library for NVIDIA Megatron-LM, related to the restoration of unreliable data in memory, allows attackers to execute arbitrary code, gain unauthorized access to protected information, and replace data.

The vulnerability of the NVIDIA Megatron-LM training library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized access to protected information, and replace data using ...

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing lies in its ability to restore unreliable data in memory. This allows attackers to execute arbitrary code, gain unauthorized access to protected information, and replace data.

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing is related to the recovery of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain...

The vulnerability of the Microsoft Remote Desktop application for operating systems running on Windows allows a hacker to replace data on the network.

The vulnerability of the Microsoft Remote Desktop application for Windows operating systems relates to the absence of warnings about dangerous actions. Exploiting this vulnerability could allow a malicious actor to replace data on the network...

CVE-2026-23378 net/sched: act_ife: Fix metalist update behavior

In the Linux kernel, the following vulnerability has been resolved: net/sched: actife: Fix metalist update behavior Whenever an ife action replace changes the metalist, instead of replacing the old data on the metalist, the current ife code is appending the new metadata. Aside from being...

The vulnerability of the Content Distribution Service (NomadBranch.exe) software platform for remote management of 1E Client allows a perpetrator to replace data.

The vulnerability of the Content Distribution Service NomadBranch.exe component of the remote management software for the 1E Client exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to replace data on the system...

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for artificial intelligence DGX Spark allows a hacker to replace data.

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for DGX Spark artificial intelligence systems is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to replace data...