CVE-2026-44266 Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in Ruby double-quoted strings without escaping , so Ruby interpolation forms in the string-literal emitter or the labelled subtype-constraint...

USN-8986-1: Swift Mailer vulnerability

Dawid Golunski discovered that Swift Mailer did not properly sanitize e-mail addresses in the mail transport. A remote attacker could possibly use this issue to pass extra parameters to the mail command and execute arbitrary code...

USN-8979-1: Deluge vulnerabilities

It was discovered that the web UI in Deluge did not protect against cross- site request forgery. A remote attacker could possibly use this issue to trick a user into installing a malicious plugin, resulting in the execution of arbitrary code. CVE-2017-7178 It was discovered that the web UI in...

SUSE CVE-2026-119716

pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to...

SUSE CVE-2026-120062

SQLSpecialColumns in psqlODBC splices the table and schema names it receives into its catalog query without escaping them, while the other catalog functions escape them. An application that passes an untrusted table or schema name to SQLSpecialColumns lets the caller execute arbitrary SQL with th...

SUSE CVE-2026-120451

libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005cinit that allow malicious USB devices to corrupt memory by supplying an unbounded allocation table entry count. Attackers can connect a spoofed Jeilin JL2005B/C/D camera reporting 1022 or more...

CVE-2026-28335

SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required...

CVE-2026-121602

Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that allows a malicious linked server to corrupt memory by sending overlong channel names in JOIN or SJOIN messages. Attackers controlling a peer server can trigger strcpy and sprintf overflows in msjoin and mssjoin...

CVE-2026-121603

Solanum before commit 2ea1382 contains a buffer overflow vulnerability in mskill that allows malicious linked servers to corrupt memory by sending an overlong kill reason. Attackers controlling a rogue or compromised peer server can send a reason exceeding KILLLEN that overflows a static 512-byte...

USN-8995-1: Yaws vulnerabilities

It was discovered that Yaws did not properly sanitize XML input in its WebDAV implementation. A remote attacker could possibly use this issue to perform XML external entity injection attacks. CVE-2020-24379 It was discovered that Yaws mishandled certain input when running CGI scripts. A remote...

manticore

⚠️ Project is archived ⚠️ This project is no longer internally developed and maintained. Manticore Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. Features Program Exploration : Manticore can execute a program with symbolic inputs and explore all the...

sinter

Sinter Sinter is a 100% user-mode endpoint security agent for macOS 10.15 and above, written in Swift. Sinter uses the user-mode EndpointSecurity API to subscribe to and receive authorization callbacks from the macOS kernel, for a set of security-relevant event types. The current version of Sinte...

CVE-2026-115295

Kibana is vulnerable to an Authorization Bypass Through User-Controlled Key (CWE-639), which can lead to information disclosure. An authenticated user with read access to connectors in one Kibana space can retrieve connector execution log information from other spaces they are not authorized to a...

CVE-2026-115295 Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read access to connectors in one Kibana space can retrieve connector execution log information fro...

CVE-2026-115295 Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read access to connectors in one Kibana space can retrieve connector execution log information fro...

GHSA-H26J-4VP7-X9W2 Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution

Summary Metalama uses a local named-pipe channel to communicate between its Visual Studio processes — the Visual Studio UI process devenv, the out-of-process Roslyn code-analysis process, and the CodeLens process. This channel deserialized messages from the pipe without restricting which CLR type...

EUVD-2026-114449

Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution...

Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution

Summary Metalama uses a local named-pipe channel to communicate between its Visual Studio processes — the Visual Studio UI process devenv, the out-of-process Roslyn code-analysis process, and the CodeLens process. This channel deserialized messages from the pipe without restricting which CLR type...

Elastic Maps Server 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-238)

Out-of-bounds Write in Elastic Maps Server Leading to Remote Code Execution Out-of-bounds Write CWE-787 in the Brotli decoder used by the Node.js runtime, a dependency of Elastic Maps Server Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to corrupt memory and...

Elastic Agent 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-234)

Out-of-bounds Write in Elastic Agent Leading to Remote Code Execution Out-of-bounds Write CWE-787 in the Brotli decoder of Node.js, a dependency of Elastic Agent Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to cause a crash, disclose process memory, or...