CVE-2026-5630 assafelovic gpt-researcher Report API app.py cross site scripting

A flaw has been found in assafelovic gpt-researcher up to 3.4.3. The impacted element is an unknown function of the file backend/server/app.py of the component Report API. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

CLEANSTART-2026-LR09759 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4

Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-Q2WW-5357-X388 vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rails, logstash, ruby3.4-rails, gitlab-cng, gitlab-rails-ce-fips, pact-broker-docker-fips, ruby3.2-rack, pact-broker-docker, ruby3.3-rack, gitlab-rails-ce, ruby3.4-rack, kube-fluentd-operator...

GHSA-H2JQ-G4CQ-5PPQ vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rails, logstash, ruby3.4-rails, gitlab-cng, gitlab-rails-ce-fips, pact-broker-docker-fips, ruby3.2-rack, pact-broker-docker, ruby3.3-rack, gitlab-rails-ce, ruby3.4-rack, kube-fluentd-operator...

GHSA-V6X5-CG8R-VV6X vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, ruby3.4-rails, pact-broker-docker-fips, pact-broker-docker, kube-fluentd-operator...

CVE-2026-32762 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, ruby3.4-rails, pact-broker-docker-fips, pact-broker-docker, kube-fluentd-operator...

GHSA-QFGR-CRR9-7R49 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, ruby3.4-rails, pact-broker-docker-fips, pact-broker-docker, kube-fluentd-operator...

GHSA-VGPV-F759-9WX3 vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rails, logstash, ruby3.4-rails, gitlab-cng, gitlab-rails-ce-fips, pact-broker-docker-fips, ruby3.2-rack, pact-broker-docker, ruby3.3-rack, gitlab-rails-ce, ruby3.4-rack, kube-fluentd-operator...

PT-2026-30655

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Version 6.4 has a local privilege-escalation vulnerability allows code execution as root from the low-privilege pihole account. Important context: the pihole account uses nologin, so this is not a direct...

free5GC 安全漏洞

free5GC is an open-source project for the 5th generation 5G mobile core network. Version 4.2.0 of free5GC contains a security vulnerability, which stems from issues with the NGSetupRequest Handler component and could lead to denial-of-service attacks...

Pi-hole 安全漏洞

Pi-hole is a web-level ad blocking application developed by Pi-hole Inc. Version 6.4 of Pi-hole contains a security vulnerability that stems from an increase in local privileges, potentially allowing root code to be executed from a low-privilege account...

PT-2026-30585

The setup: 4 agents chain off each other in a loop, each reacting to the previous response. Dominus — finds a new vulnerability angle from the CISA KEV catalog Axiom — adds one new technical detail to the finding Cipher — identifies one specific flaw in the previous argument Vector — names one...

PT-2026-30680

Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.31.2.0 Description CI4MS, a CodeIgniter 4-based CMS skeleton, is susceptible to a stored Cross-Site Scripting XSS issue. The application does not properly sanitize user-controlled input within the System Settings –...

Ferret 安全漏洞

Ferret is an open-source declarative system developed by MontFerret for web data extraction and querying. Versions of Ferret prior to 2.0.0-alpha.4 contained security vulnerabilities. These vulnerabilities stemmed from path traversal issues in the IO::FS::WRITE standard library function, which...

PT-2026-30570

A vulnerability has been found in assafelovic gpt-researcher up to 3.4.3. This affects the function extract command data of the file backend/server/server utils.py of the component ws Endpoint. Such manipulation of the argument args leads to code injection. The attack may be performed from remote...

EUVD-2019-20091

C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the site parameter. Attackers can send GET requests to the usersselect.php endpoint with crafted S...

EUVD-2026-19069

A vulnerability was determined in Campcodes Complete POS Management and Inventory System up to 4.0.6. This affects an unknown function of the file app/Http/Controllers/SettingsController.php of the component Environment Variable Handler. Executing a manipulation can lead to injection. It is...

CVE-2026-5561 Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection

A vulnerability was determined in Campcodes Complete POS Management and Inventory System up to 4.0.6. This affects an unknown function of the file app/Http/Controllers/SettingsController.php of the component Environment Variable Handler. Executing a manipulation can lead to injection. It is...

CVE-2026-5532 ScrapeGraphAI scrapegraph-ai GenerateCodeNode generate_code_node.py create_sandbox_and_execute os command injection

A vulnerability was found in ScrapeGraphAI scrapegraph-ai up to 1.74.0. The affected element is the function createsandboxandexecute of the file scrapegraphai/nodes/generatecodenode.py of the component GenerateCodeNode Component. The manipulation results in os command injection. The attack may be...