3648 matches found
PT-2026-65442
A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to normalize dot-dot-slash ../ sequences before resolving and serving the requested file. An authenticated attacker with admin privileges can use this vulnerability to read...
CVE-2026-55579
CVE-2026-55579 affects the PHP single-file editor Pheditor. From 2.0.1 up to before 2.0.6, it ships with a hardcoded default password (admin) whose SHA-512 hash is in pheditor.php:11, with no mechanism to force a first-login password change. An attacker using the default credentials gains full ac...
BIT-DOTNET-2026-50648 .NET Framework Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...
PT-2026-65027
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
PT-2026-65016
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...
PT-2026-65007
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-65032
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...
Missing Release of Memory after Effective Lifetime
Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...
GO-2026-5435 Helm Chart extraction output directory collapse via Chart.yaml name dot-segment in helm.sh/helm
Helm Chart extraction output directory collapse via Chart.yaml name dot-segment in helm.sh/helm...
EUVD-2026-47871
@fastify/static vulnerable to route guard bypass via path traversal...
@fastify/static vulnerable to route guard bypass via path traversal
Impact @fastify/static is vulnerable to a bypass of route-based middleware and guards via non-leading .. and %2E%2E path segments. find-my-way does not normalize .. when matching routes, so a request such as /foo/../deep/secret.txt matches the static plugin's catch-all instead of the guarded...
Integer Overflow or Wraparound
Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Out-of-bounds Write
Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
Out-of-bounds Write
Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
MAL-2026-11047 Malicious code in karpatkey (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b434ae7cf6afb9ce18a54757c03069983e404db695d959bd29aa628864b8349c On import karpatkey, the top-level karpatkey/init.py spawns a daemon background thread that walks the installer's home directory and collects SSH...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
RHSA-2026:41900 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:41898 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update
Bulletin has no description...