EUVD-2026-52479

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

CVE-2026-67976: Uncontrolled Resource Consumption

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

PT-2026-67439

OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackers to register a malicious client with system-level FHIR scopes by supplying a self-generated RSA keypair via the jwks field. Once an...

CVE-2026-67976

The fprime framework version v4.2.2 contains a vulnerability in the Ref::SignalGen component. The software fails to validate the safety of user-controlled parameters , which allows an attacker to trigger a Denial of Service (DoS) by providing unsafe inputs. No specific exploit details, remediatio...

CVE-2026-67977: Uncontrolled Resource Consumption

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-67521

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.14.3 Description An out-of-bounds heap read can occur in the C response parser when constructing an error message for a malformed response. This happens in the aiohttp/ http parser.pyx file, where an llhttp...

CVE-2026-67977

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-67977

The fprime framework version v4.2.2 is vulnerable to an integer overflow within the Svc::FileDownlink::SendPartial component. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted input . While the vulnerability is confirmed across multiple sources, the provided...

CVE-2026-67977

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-67976

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

CVE-2026-67977

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

dedoc/scramble Package Code Execution

The vulnerability of the dedoc/scramble package for the Laravel PHP framework is related to incorrect code generation practices. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

.NET DoS

The vulnerabilities of .NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

.NET Framework Insufficient Data Authenticity Verification

Vulnerabilities of .NET software platforms and the Microsoft .NET Framework are related to insufficient validation of data authenticity. Exploitation of these vulnerabilities can allow attackers to bypass existing security mechanisms remotely...

Exodia

Exodia Autonomous AI-driven penetrat...

flagembedding (>=1.2.0, <=1.2.2), keycare (>=0.0.1, <=0.1.0) +1 more potentially affected by CVE-2026-9856 via transformers (4.33.0)

transformers PYPI version 4.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - flagembedding =1.2.0, =0.0.1, =0.1.15, =0.2.13 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

antimatter (0.1.3), autotrain-advanced (>=0.6.42, <=0.6.44) +12 more potentially affected by CVE-2026-9856 via transformers (4.34.1)

transformers PYPI version 4.34.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - antimatter 0.1.3 - autotrain-advanced =0.6.42, =4.3.0, =1.22.0rc1, =1.0.1, =0.1.69, =0.1.73 - spacy-transformers 1.3.2 Source cves:...

Starkiller v3.6.0

Starkiller Starkiller is a Frontend for Powershell Empire. It is a web application written in VueJS. If you'd like to contribute please follow the Contribution guide. If you'd like to request a feature or report a bug, please follow the Issue template. Getting Started As of Empire 5.0 and...

onyx-agent

Onyx Agent v68 Multi-LLM agent framework for security testing...

EUVD-2026-51921

The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewpgetsvgcontent' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensiti...