CVE-2026-97380

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor...

EUVD-2026-102952

Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...

CVE-2026-109461

An origin validation error exists in the Microsoft Authentication Library (MSAL) for Node.js . This vulnerability allows an unauthorized attacker to perform information disclosure over a network. The CVSS 3.1 base score is 5.9 (Medium), with a high impact on confidentiality and high attack comple...

CVE-2026-97380

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor...

CVE-2026-97380

The MariaDB server contains an authorization error in the GRANT PROXY statement affecting versions 10.6.1 through 10.6.28 , 10.11.19 , 11.4.13 , 11.8.9 , 12.3.3 , and 13.0.2 . The root cause is that an IDENTIFIED clause with an empty password is incorrectly treated as having no specified authenti...

EUVD-2026-102916

countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, star-rating/images/ and dashboards/images/screenshots/ are among public image and screenshot routes using the local fs storage backend that call getStream and pipe filesystem streams t...

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of...

CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the...

CVE-2026-111450

Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

CVE-2026-111450

Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request...

CVE-2026-111450

The Wheels framework (versions through 4.1.1 ) is vulnerable to an issue where it derives the default production error-email address from the Host header of the initial request starting the application. If an explicit recipient is not configured and a mail server is active, an attacker can trigge...

MAL-006

MAL-006: XML External Entity in "Try It" in WSO2 ESB An error-based XML External Entity XXE attack was identified in the WSO2 ESB "Try It" tool. Why no CVE? The vendor replied that "Try it is recommended to be disabled in production" and no public disclosure was made. Requirements: This...

Veridiff

════════════════════════════════════════════════════════════════ VERIDIFF the exact instruction where two runs of the same code split ════════════════════════════════════════════════════════════════ Two traces go in. One address comes out: the exact basic block where your two runs stopped agreein...

CVE-2021-42574

rustc version 1.56.1: fixed and compile error rustc version 1.56: compile success...

EUVD-2026-102536

A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error...

CVE-2026-89062

A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error...

Debian dla-4840 : jq - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4840 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4840-1 [email protected] https://www.debian.org/lts/security/...

PT-2026-115852

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131745 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdrfirstde return value The hdrfirstde function returns a pointer to a struct...