CVE-2026-56815

pwnlift before d7a9544, in a privileged deployment, contains a symlink following vulnerability in the upload handler in Components/Pages/Home.razor...

CVE-2026-56815

The CVE-2026-56815 entry concerns the pwnlift project, specifically a symlink following vulnerability in the upload handler located at Components/Pages/Home.razor, exploitable in a privileged deployment. Root cause is described as a symlink following issue within the upload handler. The CVSS 3.1 ...

CVE-2026-56815

pwnlift before d7a9544, in a privileged deployment, contains a symlink following vulnerability in the upload handler in Components/Pages/Home.razor...

CVE-2026-56815

pwnlift before d7a9544, in a privileged deployment, contains a symlink following vulnerability in the upload handler in Components/Pages/Home.razor...

EUVD-2026-38454

pwnlift before d7a9544, in a privileged deployment, contains a symlink following vulnerability in the upload handler in Components/Pages/Home.razor...

CVE-2026-56815

pwnlift before d7a9544, in a privileged deployment, contains a symlink following vulnerability in the upload handler in Components/Pages/Home.razor...

EUVD-2026-38436

Nuxt 4.0.0 before 4.4.7 and 3.18.0 before 3.21.7, when running the development server nuxt dev on Linux, binds the vite-node IPC server to an abstract-namespace Unix socket without permission restrictions, allowing local users to enumerate and connect. Unprivileged co-resident users can exploit t...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: migrate, ory-kratos, cert-manager-fips, databricks-cli, flux-kustomize-controller, datadog-agent-fips, kubernetes-csi-external-resizer-fips, gitness, cadvisor, victoriametrics-operator, crossplane-provider-aws-vpc-fips, grafana, datadog-operator-fips, calico-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: migrate, ory-kratos, cert-manager-fips, databricks-cli, flux-kustomize-controller, datadog-agent-fips, kubernetes-csi-external-resizer-fips, gitness, cadvisor, victoriametrics-operator, crossplane-provider-aws-vpc-fips, grafana, datadog-operator-fips, calico-fips,...

PT-2026-51635

Name of the Vulnerable Software and Affected Versions OctoPrint versions prior to 1.11.8 OctoPrint versions 2.0.0rc1 through 2.0.0rc2 Description An issue exists where an attacker with FILE UPLOAD permissions can exfiltrate files from the host that OctoPrint has read access to by moving them into...

CVE-2026-56693: Client-Side Enforcement of Server-Side Security

NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the createagent delivery-action handler that performs privileged central-database writes without host-side authorization checks. Confined agent containers can invoke createagent to create arbitrary agent groups, container...

PT-2026-51531

Name of the Vulnerable Software and Affected Versions NanoClaw versions prior to 2.1.17 Description A privilege escalation issue exists in the create agent delivery-action handler. The handler performs privileged central-database writes without implementing host-side authorization checks. This...

PT-2026-51647

Name of the Vulnerable Software and Affected Versions motionEye version 0.43.1 Description The ActionHandler.post function in the motioneye/handlers/action.py file lacks an authentication decorator. This allows an unauthenticated attacker to trigger camera actions via the /action/camera id/action...

PT-2026-51524

Name of the Vulnerable Software and Affected Versions pwnlift versions prior to d7a9544 Description In a privileged deployment, the upload handler in 'Components/Pages/Home.razor' contains a symlink following issue. This occurs when the application follows symbolic links files that point to anoth...

DNS Rebinding

Overview Glances is an A cross-platform curses-based monitoring tool Affected versions of this package are vulnerable to DNS Rebinding via the GlancesXMLRPCHandler process. An attacker can access sensitive system monitoring data by exploiting DNS rebinding through a victim's browser, allowing...

org.openidentityplatform.openam:openam-slf4j (>=15.1.2, <=15.1.3), org.openidentityplatform.opendj:opendj-dsml-servlet (4.8.2) +5 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (4.8.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j =15.1.2,...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.15), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.15) +3 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.15)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.openam:embedded.opendj (14.5.4.1), org.openidentityplatform.openam:openam-slf4j (14.5.4) +3 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.8)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:embedded.opendj 14.5.4....

org.openidentityplatform.openam:openam-slf4j (15.2.2), org.openidentityplatform.opendj:opendj-dsml-servlet (4.10.2) +5 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (4.10.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.2.2 -...

org.openidentityplatform.openam:openam-slf4j (15.1.6), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.4) +5 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.4)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.6 -...