aio-libs Async HTTP client/server framework Resource management error vulnerability

The aio-libs Async HTTP client/server framework, versions 2.0.0 to 3.14.4, has a resource management vulnerability. This vulnerability stems from the handling of multipart requests, which retains an unlimited number of open file descriptors. When the processing program uses Request.post,...

Docling Project: "docling-core" input validation error vulnerability

The Docling Project’s docling-core 2.102.0 and earlier versions have a vulnerability in input validation. This vulnerability stems from the fact that the ImageRef URI accepts pure file system paths and bypasses the allowimagefileuri restriction. Attackers can exploit this vulnerability by...

Aleksey Hoffman Sigma File Manager: Server Request Forgery Vulnerability

Aleksey Hoffman’s Sigma File Manager versions 2.2.0 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from the validateremoteurl function in security.rs, which does not check the IP address after the extension download command is parsed. As a result, it becom...

Apache Camel path traversal vulnerability

Versions of Apache Camel Mina SFTP from 4.18.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a path traversal vulnerability. This vulnerability arises when the remote file consumer concatenates the configuration directory with the filenames in the server directory list without proper normalization ...

Flarum Authorization Vulnerability

Versions of Flarum 2.0.0-beta.1 to 2.0.0-beta.8 have a permission-related vulnerability. This vulnerability stems from the lack of authentication and administrator checks on the TaskResource index endpoint. A remote attacker can send a GET request to /api/extension-manager-tasks to read task...

Viraj Potdar Criminal-Management-System: Vulnerabilities in Permission Authorization and Access Control Mechanisms

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from improper handling of the parameter ‘myimg’ in the ‘move Uploaded File’ function within the ‘home.php’ file. As a result, arbitrary file uploads can occur, and this vulnerability may be exploite...

Codexu NoteGen: Input validation error vulnerability

Codexu NoteGen versions 0.38.3 and earlier have a vulnerability in input validation. This vulnerability stems from the insufficient validation of the sourceUrl path during the chat image analysis function. It may be affected by external control over file paths, allowing attackers with write...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.7.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper restrictions on external entities by the camel-smooks component. The default XML parser allows for the parsing of external...

Eptura Archibus arbitrary file upload vulnerability

Versions of Eptura Archibus prior to 2025.02 contained a vulnerability related to arbitrary file upload. This vulnerability stemmed from the ability of users to upload exported reports containing arbitrary file content, specify arbitrary content, and upload JSP code with JSPX as the file extensio...

Satya-Vinay Events-Management-System Authorization Vulnerability

Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from manipulating unknown parts of the project.sql file, which may allow files or directories to be accessed. Remote attackers can exploit this vulnerability...

WordPress WP Mailster code injection vulnerability

WordPress WP Mailster 1.9.1.0 and earlier versions have a code injection vulnerability. This vulnerability stems from improper control of file names by the include/require statements in PHP programs, which may lead to PHP local file inclusion...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation. This vulnerability arises when the FopProducer creates a TransformerFactory by enabling only FEATURESECUREPROCESSING, without restricting access to external resources...

Pillow Resource Management Error Vulnerability

Pillow versions from 5.3.0 to 13.0.0 contain a resource management vulnerability. This vulnerability arises when libtiff performs short decoding on JPEG compressed or Group 4 fax TIFF data. Pillow fails to clear the trailing parts of the decodeStrip and decodeTile buffers. Attackers can exploit...

VideoLAN LibBluray buffer error vulnerability

VideoLAN libbluray 1.5.1 and earlier versions have a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the clpiaccesspoint function. Attackers can trigger this issue by providing a ClipInfo file containing an empty EP-map fine table with numepfine set to zero and...

PT Norther Lights Production Map – SVG file upload vulnerability

PT Norther Lights Production Map: Versions prior to SVG 8.16.1 have an arbitrary file upload vulnerability. This vulnerability stems from allowing the upload of dangerous types of files, which may lead to the uploading of a Web Shell to the web server...

Red Hat Enterprise Linux Resource Management Vulnerability

Red Hat Enterprise Linux has a resource management vulnerability. This vulnerability arises when GIMP attempts to load a specially crafted XCF file by selecting a path; the loading process fails. As a result, the main process is reloaded after being released, potentially leading to a crash and...

Exploit for CVE-2026-53787

Def4cer A Secure Version of CVE-2026-53787 Amasty Order Attrib...

CVE-2026-98844

In the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache when extending a file via write Fix netfs to erase the contents of a hole created after the EOF by an ordinary write if dirty data has been previously left there by writes through an mmapped region...

EUVD-2026-103863

In the Linux kernel, the following vulnerability has been resolved: binder: fix isfailure flag for superseded transaction cleanup When a TFUPDATETXN transaction supersedes a pending async transaction, binderreleaseentirebuffer is called with isfailure=false. Since the superseded transaction was...

CVE-2026-98778 binder: fix is_failure flag for superseded transaction cleanup

In the Linux kernel, the following vulnerability has been resolved: binder: fix isfailure flag for superseded transaction cleanup When a TFUPDATETXN transaction supersedes a pending async transaction, binderreleaseentirebuffer is called with isfailure=false. Since the superseded transaction was...