56499 matches found
CVE-2026-10807
A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function of the file application/PHP/objects/profiles/changeprofileimage.php. Executing a manipulation of the argument prprofileimage can lead to unrestricted upload. The attack may be launched remotely. The...
PYSEC-2026-212
A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation leads to use of weak hash. Local access is required to approach this attack. The attack requires a...
CVE-2026-10801
A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template.savepilimage of the file swift/template/base.py of the component PIL Image Cache Key Handler. The manipulation leads to use of weak hash. An attack has to be approached locally. A hig...
EUVD-2026-34185
A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function datahash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack...
PT-2026-46364
Unauthenticated Local File Inclusion in Gita = 1.11 versions...
PT-2026-46322
Unauthenticated Local File Inclusion in Modernee = 1.6.0 versions...
PT-2026-46346
Unauthenticated Local File Inclusion in Wanium = 1.9.8 versions...
PT-2026-46369
Unauthenticated Local File Inclusion in Choreo = 1.6 versions...
PT-2026-46220
A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function of the file application/PHP/objects/profiles/change profile image.php. Executing a manipulation of the argument pr profile image can lead to unrestricted upload. The attack may be launched remotely...
PT-2026-46372
Unauthenticated Local File Inclusion in Spike = 1.2 versions...
PT-2026-46399
A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats path of the file /bin/rstats of the component Web UI. Executing a manipulation can lead to os command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be...
PT-2026-46342
Unauthenticated Local File Inclusion in Fortius = 2.3.0 versions...
PT-2026-46337
Unauthenticated Local File Inclusion in Dazzle = 1.0.0 versions...
PT-2026-46377
Unauthenticated Local File Inclusion in Etude = 1.6 versions...
PT-2026-46353
Unauthenticated Local File Inclusion in Preservation = 1.10 versions...
PT-2026-46387
Name of the Vulnerable Software and Affected Versions WP Meta Sort Posts versions prior to 1.0 Description The WP Meta Sort Posts plugin for WordPress is subject to Cross-Site Request Forgery CSRF, a type of attack where an unauthorized user tricks a victim into performing actions they did not...
PT-2026-46180
Name of the Vulnerable Software and Affected Versions modelscope ms-swift versions prior to 4.2.1 Description The PIL Image Cache Key Handler component contains an issue where the Template. save pil image function in the swift/template/base.py file uses a weak hash. Exploitation requires local...
PT-2026-46348
Subscriber Privilege Escalation in Genemy = 1.6.6 versions...