CVE-2026-48236

Open ISES Tickets before 3.44.2 contains a SQL injection in db_loader.php where multiple POST parameters (ticketsdb, ticketshost, ticketsuser, ticketspassword) are concatenated into mysqli connection arguments and used in dynamic SQL against an attacker‑controlled database without sanitization. A...

PT-2026-45157

Name of the Vulnerable Software and Affected Versions Twig affected versions not specified Description The TwigProfilerDumperHtmlDumper component fails to escape the output of Profile::getTemplate and Profile::getName when writing to HTML. If an attacker can control the template name—which may...

clamav:clamav_dbload_CDB_fuzzer: Heap-buffer-overflow in doemit

Detailed Report: https://oss-fuzz.com/testcase?key=4952514699591680 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x7fa77fc58be8 Crash State: doemit doinsert per...