CVE-2026-59967

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, looks up BookmarkletImport by sequential primary key within the active Space without restricting createdby to the requesting user when an authenticated member of a shared Space...

CookieViz

CookieViz Français CookieViz est un outil de visualisation qui permet de mesurer l'impact des cookies lors de votre propre navigation. Cookieviz analyse les interactions entre un navigateur et des sites et serveurs distants. Vous pourrez savoir à quels autres acteurs le site que vous visitez envo...

Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Jackson Databind

Summary IBM SPSS Modeler is affected by vulnerabilities in Jackson Databind. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-54516 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data...

CVE-2026-59967 Tandoor Recipes: Cross-user IDOR in /api/recipe-from-source/ bookmarklet import — read and destroy another space member's pending BookmarkletImport

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, looks up BookmarkletImport by sequential primary key within the active Space without restricting createdby to the requesting user when an authenticated member of a shared Space...

CVE-2026-59967

Prior to version 2.6.10 , Tandoor Recipes is vulnerable to a Cross-user IDOR in the /api/recipe-from-source/ endpoint. The application fails to restrict the created_by field when looking up a BookmarkletImport by its sequential primary key within a shared Space. An authenticated member can submit...

CVE-2021-47881

CVE-2021-47881 Local stack-based buffer overflow in dataSIMS Avionics ARINC 4.5.3 Data Device Corporation Hi, I'm Kağan Çapar. In February 2020 I found a local stack-based buffer overflow in DDC's dataSIMS avionics databus software and published a proof of concept on Exploit-DB in February 2021...

CVE-2026-92262

The MariaDB server is vulnerable to multiple issues caused by a historical #mysql50# tablename encoding bypass . The root cause allows the #mysql50# prefix to bypass normal filesystem encoding for table names. An attacker can trigger this by using a table name with the #mysql50# prefix to access ...

CVE-2026-42269

countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, the authenticated data-migration deletion route in plugins/datamigration/api/api.js passes the user-controlled exportid to cleanupdata without path validation...

CVE-2026-61801 affecting package containerized-data-importer for versions less than 1.62.0-9

CVE-2026-61801 affecting package containerized-data-importer for versions less than 1.62.0-9. A patched version of the package is available...

CVE-2026-78669 affecting package containerized-data-importer for versions less than 1.62.0-9

CVE-2026-78669 affecting package containerized-data-importer for versions less than 1.62.0-9. A patched version of the package is available...

CVE-2026-97032 affecting package containerized-data-importer for versions less than 1.62.0-9

CVE-2026-97032 affecting package containerized-data-importer for versions less than 1.62.0-9. A patched version of the package is available...

EUVD-2026-102915

countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, the authenticated data-migration deletion route in plugins/datamigration/api/api.js passes the user-controlled exportid to cleanupdata without path validation...

CVE-2026-42269

The countly-server product analytics solution is vulnerable to a path traversal vulnerability in versions prior to 24.05.50 and 25.03.44 . The authenticated data-migration deletion route in plugins/data_migration/api/api.js fails to validate the user-controlled exportid parameter before passing i...

CVE-2026-42269 countly-server: Path Traversal in delete_import Endpoint Allows Arbitrary File and Directory Deletion

countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, the authenticated data-migration deletion route in plugins/datamigration/api/api.js passes the user-controlled exportid to cleanupdata without path validation...

CVE-2026-111139

A flaw was found in libnsbmp. This vulnerability allows an attacker to cause a Denial of Service DoS by tricking an application into processing a specially crafted icon ICO file. Due to improper bounds checking when decoding mask data for an image whose bitmap width is not an expected multiple of...

CVE-2026-18783-TREX-MES-Uygulamalarinda-Yetkisiz-Nesne-Erisimi

TREX-MES-Uygulamalarinda-Yetkisiz-Nesne-Erisimi CVE-2026-18783 Genel Bakış TREX MES, üretim sahasından veri toplamak ve yönetmek için kullanılan ticari bir Üretim Yürütme Sistemi MES / Endüstri 4.0 platformudur. Yapılan çalışmalarda, /api/GetDataJSON3 API uç noktasına gönderilen isteklerin geçerl...

supahunter

Supabase Hunter OP Mode Advanced Reconnaissance & Exploitation Tool for Supabase Instances. SupaHunter is a powerful Python tool designed to identify, analyze, and exploit misconfigured Supabase projects. It goes beyond simple table enumeration, offering deep inspection capabilities, Selenium-bas...

CVE-2026-80099

CVE-2026-80099 PoC Unauthenticated authentication bypass and RCE exploit targeting Newfold WordPress plugins that bundle wp-module-data. Overview This tool exploits a Bearer token validation flaw in the Newfold wp-module-data module. When a WordPress site using an affected Newfold plugin is not...

kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()

A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL segment routing header SRH decompression function, ipv6rplsrhdecompress. An integer overflow occurs when processing a specially crafted IPv6 packet, causing the header length calculation to truncate...

kernel: ipv6: fix use-after-free in ip6_finish_output2()

A flaw was found in the Linux kernel's IPv6 networking stack. A use-after-free vulnerability exists in the ip6finishoutput2 function, where a cached pointer to the IPv6 destination address can become stale after memory reallocation. An attacker could potentially exploit this to leak sensitive...