ROS-20261019-73-0017

The vulnerability of the findfile.c component of the Vim text editor is related to the improper handling of CTR-W f when the file name is absent. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Adversarial Benchmarks and BenchDoor Attacks: Exploiting Benchmark Incentives for Backdoor Attacks

Machine learning benchmarks act as guideposts for model development and spur the creation of training datasets intended to improve benchmark scores. We introduce BenchDoor, a family of data poisoning attacks that exploits this incentive. Beyond preserving benign performance, BenchDoor requires...

PT-2026-117468

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate url private-address check. Attackers influencing agent tool input through prompt injection can direct...

PT-2026-117492

Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac hide and promoted GET parameters of admin/modules/bibliography/index.php, because escape string is applied but the values are concatenated into an unquoted numeric SQL...

PT-2026-117649

Name of the Vulnerable Software and Affected Versions Pillow versions 8.2.0 through 12.x.x Description The tiled-TIFF decoder in the libImaging module contains a memory corruption issue. When processing tiled TIFF images, the decodeTile function allocates a buffer based on the tile size reported ...

PT-2026-117517

Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows cross-site request forgery CSRF against admin/modules/circulation/loan history maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data...

PT-2026-117355

Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-mllp component carries a logPhi option that governs whether HL7 payload content may be written to the log...

PT-2026-117513

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

CVE-2026-112274: Out-of-bounds Read

libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soarecord::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causin...

CVE-2026-107084

Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows cross-site request forgery CSRF against admin/modules/circulation/loanhistorymaintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data los...

ROS-20261019-73-0036

The vulnerability in python-ecdsa is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Linux kernel LZNT Decompression Data Compromise

The vulnerability in the decompresslznt function within the fs/ntfs3/lznt.c component of the Linux kernel operating system is related to buffer overflow conditions. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected...

Navigation section of Microsoft Data Compromise

The vulnerability in the Navigation section of Microsoft Edge and Google Chrome browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Hugo Static Site Generator Bypass

The vulnerability of the Hugo static site generator is related to deficiencies in the mechanism for processing register-dependent data. Exploiting this vulnerability allows an attacker to bypass existing security measures...

Azure API Center Information Disclosure

The vulnerability of the cloud service for centralized tracking, detection, and management of all Azure API Center programming interfaces is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Navigation section of Microsoft Data Compromise

The vulnerability in the Navigation section of Microsoft Edge and Google Chrome browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected data by using a specially...

PT-2026-117274

MISP contains a data integrity flaw in its event deletion logic. When a user deletes an event, several associated records are not removed from the database, leaving them as orphaned entries. The affected record types include event report tags, event graph entries, proposal shadow attribute...

PT-2026-117474

Name of the Vulnerable Software and Affected Versions Netskope Client versions prior to R142 Description A gap in the NSClient agent occurs when a system connects to an access point with a Captive Portal and then switches to a network that already has internet connectivity, causing the Captive...

EUVD-2026-104552

Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows cross-site request forgery CSRF against admin/modules/circulation/loanhistorymaintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data los...

Apache Camel camel-thrift 4.22.0 Cross-Exchange Data Disclosure

Apache Camel camel-thrift versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1 contain a cross-exchange data disclosure issue. The proof of concept demonstrates a later Thrift message inheriting an omitted field from an earlier message. https://packetstorm.news/download/236333...