9131 matches found
CVE-2026-57863
Crater Invoice (through 6.0.6 ) contains a path traversal vulnerability in its self-update API. The root cause is unsanitized ZIP entry names containing ../ sequences passed to PHP's ZipArchive::extractTo(), allowing authenticated company owners to write arbitrary files outside the intended extra...
CVE-2026-78864
A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller.t of the component Journey Entry Update. This manipulation causes sql injection. It is possible to initiate the atta...
CVE-2026-78864 liketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry sql injection
A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller.t of the component Journey Entry Update. This manipulation causes sql injection. It is possible to initiate the atta...
EUVD-2026-65458
A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller.t of the component Journey Entry Update. This manipulation causes sql injection. It is possible to initiate the atta...
CVE-2026-78864
A SQL injection vulnerability exists in liketrek TREK versions up to 3.0.22 , located in the journeyService.updateEntry function within the file server/src/nest/journey/journey.controller.t (Journey Entry Update component). The flaw can be exploited remotely by an authenticated user with low priv...
Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection
The Everest Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.3 via deserialization of untrusted input from form entry metadata. This is due to the html-admin-page-entries-view.php file calling PHP's native unserialize on stored entry meta...
bn-uefi-helper
bn-uefi-helper ATTENTION: This plugin has been deprecated. See EFI Resolver Description Helper plugin for analyzing UEFI firmware. This plugin contains the following features: Apply the correct prototype to the entry point function Fix segments so all segments are RWX and have the correct semanti...
CVE-2026-72699
creationtimestamp| type| source ---|---|--- 2026-08-25 03:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtutsahuik2j 2026-08-25 04:07:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzs3rtg2p...
tarnish
tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...
ROOT-OS-DEBIAN-13-CVE-2025-38660 CVE-2025-38660 in linux - Patched by Root
Root has patched CVE-2025-38660 in the linux package for Root:Debian:13. Multiple fixed versions available...
CVE-2026-78367
creationtimestamp| type| source ---|---|--- 2026-08-24 14:26:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117150947578726789...
BIT-COSIGN-2026-22703 Cosign verification accepts any valid Rekor entry under certain conditions
Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...
CVE-2026-66109
creationtimestamp| type| source ---|---|--- 2026-08-24 08:45:26+00:00| seen| https://jvn.jp/en/jp/JVN33423625 2026-08-25 09:46:37+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtvjxd7dnh2i...
ROOT-OS-DEBIAN-11-CVE-2026-46245 CVE-2026-46245 in linux - Patched by Root
Root has patched CVE-2026-46245 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-23071 CVE-2026-23071 in linux - Patched by Root
Root has patched CVE-2026-23071 in the linux package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-74631
CVE-2026-74631 affects the Linux kernel net: smc subsystem, specifically the smc_rx_splice() function. The root cause is a splice entry lifetime imbalance : pages are passed to splice_to_pipe() before the references covering each entry's lifetime are taken. In the VM-backed RMB path, unqueued ent...
CVE-2026-74624
A deadlock vulnerability exists in the Linux kernel's netfilter nf_conntrack component. When TCP or SCTP conntrack paths emit invalid-packet logs while ct->lock is held, and logging is routed to nfnetlink_log with conntrack export enabled, the log path can re-enter conntrack netlink glue that ...
Linux Distros Unpatched Vulnerability : CVE-2026-74624
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntrack: defer invalid log until after unlock TCP and SCTP conntrack paths can emit invalid-packet logs while ct-lock is still held. When invalid...