GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from improper external control of file names or paths, allowing attackers to delete arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to incorrect external control using filenames or paths. Exploiting this vulnerability could allow a malicious actor to delete any files at will...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability

Summary A use-after-free vulnerability exists in the CldiStreamCompleteRequest functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls can lead to privilege escalation. An attacker can execute a...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

pymap

pymap — SQL injection discovery & exploitation toolkit Two co...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Cross-Site Scripting.

Summary ip-address is used by IBM Storage Fusion Data Foundation, which could cause Cross-Site Scripting. CVE-2026-42338. Vulnerability Details CVEID:CVE-2026-42338 DESCRIPTION: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1,...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to XML Injection.

Summary fast-xml-builder is used by IBM Storage Fusion Data Foundation, which could cause XML Injection. CVE-2026-44665. Vulnerability Details CVEID:CVE-2026-44665 DESCRIPTION: fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute values but process...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Cross-Site Scripting

Summary React Router is used by IBM Storage Fusion Data Foundation, which could cause Cross-Site Scripting. CVE-2026-22029 Vulnerability Details CVEID:CVE-2026-22029 DESCRIPTION: React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.

Summary spdystream is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-35469. Vulnerability Details CVEID:CVE-2026-35469 DESCRIPTION: spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Cross-Site Scripting.

Summary postcss is used by IBM Storage Fusion Data Foundation, which could cause Cross-Site Scripting. CVE-2026-41305. Vulnerability Details CVEID:CVE-2026-41305 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.

Summary compression is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-87776 Vulnerability Details CVEID:CVE-2026-87776 DESCRIPTION: compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service

Summary fast-xml-parser is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-27942, CVE-2026-26278, CVE-2026-33036 Vulnerability Details CVEID:CVE-2026-27942 DESCRIPTION: fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML fro...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Information Disclosure

Summary ws is used by IBM Storage Fusion Data Foundation, which could cause Information Disclosure. CVE-2026-45736 Vulnerability Details CVEID:CVE-2026-45736 DESCRIPTION: ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close implementation is vulnerabl...

CVE-2026-92705

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...

CVE-2026-108258

Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied stateid and joins it into the server-side shinybookmarks directory without validating that it is a single safe path segment. An unauthenticated...