EUVD-2026-104867

The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...

CVE-2026-112238

The ameos_filemanager extension contains an SQL Injection vulnerability (CWE-89) within its file search functionality. The application fails to escape quote characters when building database conditions, only escaping wildcard characters for the LIKE operator. Consequently, a crafted search term c...

CVE-2026-112238 SQL Injection in extension "File manager" (ameos_filemanager)

The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...

CVE-2026-112238

The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...

CVE-2026-112238 SQL Injection in extension "File manager" (ameos_filemanager)

The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...

WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Academist Core versions = 1.4.1...

CVE-2026-43854

A vulnerability exists that could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices . No specific software versions, root causes, or remediation steps are provided in the documents. Exploitation details are not provided.

CVE-2026-43854

A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices...

CVE-2026-43854

A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices...

CVE-2026-43852

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system...

CVE-2026-43852

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system...

EUVD-2026-104853

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system...

CVE-2026-43852

CVE-2026-43852 involves a vulnerability that could allow an authenticated attacker to write files to arbitrary locations on the system. The provided documents do not specify the affected software, hardware, version, or specific root cause. Details regarding remediation or exploit availability are...

CVE-2026-43851

A path traversal vulnerability exists that could allow an authenticated attacker to read arbitrary files on the system. Technical details regarding the specific affected software, version, or root cause are not provided in the documents. No exploit information or remediation steps are available.

CVE-2026-43851

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system...

CVE-2026-43851

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system...

TYPO3-EXT-SA-2026-034: SQL Injection in extension "File manager" (ameos_filemanager)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-034...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324: A Closer Look at the SAP NetWeaver Unauthentic...

CVE-2026-112177

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted...

EUVD-2026-104827

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted...