EUVD-2026-75641

Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoDB integration for Laravel can cause a caller-supplied embedded record identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated use...

CVE-2026-88027 Mass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for Laravel

Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoDB integration for Laravel can cause a caller-supplied embedded record identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated use...

CVE-2026-88027

CVE-2026-88027 affects the MongoDB integration for Laravel in its embedded-document relation handling . The root cause is a query-operator injection flaw: a caller-supplied embedded record identifier can be interpreted as a query condition rather than a literal identifier, due to improper neutral...

PT-2026-89541

Name of the Vulnerable Software and Affected Versions MongoDB integration for Laravel affected versions not specified Description Improper neutralization of special elements in data query logic within the embedded-document relation handling allows an authenticated user to manipulate an embedded...

Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

DRUPAL-CONTRIB-2026-148

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module contains embedded credentials used by the functionality provided by the module. Under certain circumstances, these credentials could...

CVE-2026-87809

Siyuan before v3.8.2 fails to apply publish-access filtering to embedded blocks before rendering in the /api/export/preview and /api/lute/copyStdMarkdown endpoints. Attackers with reader access can retrieve the full rendered content of private, hidden, or publish-disabled blocks by accessing publ...

CVE-2026-87809 Siyuan before v3.8.2 Information Disclosure via Export Preview

Siyuan before v3.8.2 fails to apply publish-access filtering to embedded blocks before rendering in the /api/export/preview and /api/lute/copyStdMarkdown endpoints. Attackers with reader access can retrieve the full rendered content of private, hidden, or publish-disabled blocks by accessing publ...

CVE-2026-87809 Siyuan before v3.8.2 Information Disclosure via Export Preview

Siyuan before v3.8.2 fails to apply publish-access filtering to embedded blocks before rendering in the /api/export/preview and /api/lute/copyStdMarkdown endpoints. Attackers with reader access can retrieve the full rendered content of private, hidden, or publish-disabled blocks by accessing publ...

CVE-2026-87809

Siyuan before v3.8.2 contains an information disclosure flaw where publish-access filtering is not applied to embedded blocks before rendering in the /api/export/preview and /api/lute/copyStdMarkdown endpoints. An attacker with reader-level access can retrieve the full rendered content of private...

EUVD-2026-74835

Siyuan before v3.8.2 fails to apply publish-access filtering to embedded blocks before rendering in the /api/export/preview and /api/lute/copyStdMarkdown endpoints. Attackers with reader access can retrieve the full rendered content of private, hidden, or publish-disabled blocks by accessing publ...

CVE-2026-87809 Siyuan before v3.8.2 Information Disclosure via Export Preview

Siyuan before v3.8.2 fails to apply publish-access filtering to embedded blocks before rendering in the /api/export/preview and /api/lute/copyStdMarkdown endpoints. Attackers with reader access can retrieve the full rendered content of private, hidden, or publish-disabled blocks by accessing publ...

Malicious Package

Overview @fyxzpediaa/baileys is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of t...

renode v1.17.0

Renode Copyright c 2010-2026 Antmicro What is Renode? Renode was created by Antmicro as a virtual development tool for multi-node embedded networks both wired and wireless and is intended to enable a scalable workflow for creating effective, tested and secure IoT systems. With Renode, developing,...

CVE-2026-6485

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

CVE-2026-6485

CVE-2026-6485 affects UEFI BIOS firmware that embeds the TianoCore EDK II UEFI Shell in SPI Flash. A logic error in the Shell boot option removal process allows an attacker with root privileges to create multiple boot entries, bypassing the Secure Boot check and gaining access to the Shell's phys...

PT-2026-88947

Name of the Vulnerable Software and Affected Versions Siyuan versions prior to 3.8.2 Description Insufficient publish-access filtering for embedded blocks occurs during rendering. Users with reader access can retrieve the full rendered content of private, hidden, or publish-disabled blocks by...

PT-2026-89249

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module contains embedded credentials used by the functionality provided by the module. Under certain circumstances, these credentials could...

The vulnerability of the iio_buffer_enqueue_dmabuf() function in the drivers/iio/industrialio-buffer.c file of various types of embedded sensor sensors in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the iiobufferenqueuedmabuf function in the drivers/iio/industrialio-buffer.c module, which is used by various types of embedded sensor drivers in Linux operating systems, involves a flaw where resources are not released after their useful period has ended. Exploiting this...