21236 matches found
CVE-2026-43937
Summary: CVE-2026-43937 affects YetAnotherForum.NET (YAF.NET) prior to 4.0.5. An admin handler (OnPost… in /Admin/RunSql) can bypass authorization due to PageSecurityCheckAttribute executing after the handler, allowing arbitrary SQL execution via IDbAccess.RunSql when a low-privileged user posts ...
CVE-2026-8210
A security vulnerability has been detected in aandrew-me tgpt up to 2.11.1 on Linux/macOS. Affected by this vulnerability is the function helper.Update of the file helper.go of the component Update Handler. The manipulation leads to command injection. Local access is required to approach this...
CVE-2026-8222
A vulnerability has been found in Open5GS up to 2.7.7. Affected is the function pcfnbsfmanagementhandleregister of the file src/pcf/nbsf-handler.c of the component sm-policies Endpoint. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has been...
CVE-2026-6932
The Woo Commerce Minimum Weight plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.0.1. This is due to missing nonce verification on the settings update handler in edit-weight.php. This makes it possible for unauthenticated attackers to modify t...
CVE-2026-7616 Zawgyi Embed <= 2.1.1 - Cross-Site Request Forgery via 'zawgyi_forceCSS' Parameter
The Zawgyi Embed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1. This is due to missing or incorrect nonce validation on the zawgyiadminpage function. This makes it possible for unauthenticated attackers to update the plugin's...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds in the NGAP Message Handler component. An attacker can cause memory corruption by sending specially crafted NGAP messages remotely with low privileges. Remediation Upgrade github.com/omec-project/amf/util to version 2.2.0 ...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds in the NGAP Message Handler component. An attacker can cause memory corruption by sending specially crafted NGAP messages remotely with low privileges. Remediation Upgrade github.com/omec-project/amf/gmm to version 2.2.0 o...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds in the NGAP Message Handler component. An attacker can cause memory corruption by sending specially crafted NGAP messages remotely with low privileges. Remediation Upgrade github.com/omec-project/amf/metrics to version 2.2...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds in the NGAP Message Handler component. An attacker can cause memory corruption by sending specially crafted NGAP messages remotely with low privileges. Remediation Upgrade github.com/omec-project/amf/ngap to version 2.2.0 ...
CVE-2026-8349
A flaw has been found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGAP Message Handler. Executing a manipulation can lead to memory corruption. The attack can be launched remotely. The exploit has been published and may be used. This patch is called...
WordPress plugin Rate Star Review Vote - AJAX Reviews, Votes, Star Ratings 安全漏洞
WordPress, among others, is a product of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. Effect is a software package used for adding image effects. Aaron Update is a product developed by Aaron, the individual developer behind the project. Update is a...
WordPress plugin Woo Commerce Minimum Weight 跨站请求伪造漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
Fortinet FortiManager DoS due to unsafe function in signal handler (FG-IR-26-137)
The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-137 advisory. - A use of potentially Dangerous Function vulnerability CWE-676 in FortiAnalyzer and FortiManager API may allow an...
PT-2026-40449
Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.21 Description Authenticated users can write attacker-controlled files to arbitrary locations by supplying a crafted filename with traversal sequences. This occurs due to an unvalidated filename parameter in the uplo...
YAFNET SQL注入漏洞
YAFNET is an ASP.NET open-source forum solution developed by YAFNET’s individual developers. Versions of YAFNET prior to 4.0.5 contained a SQL injection vulnerability. This vulnerability stems from the OnPost handler redirection of responses after executing side effects, which could allow...
Fortinet FortiAnalyzer DoS due to unsafe function in signal handler (FG-IR-26-137)
The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-137 advisory. - A use of potentially Dangerous Function vulnerability CWE-676 in FortiAnalyzer and FortiManager API may allow an...
CVE-2026-8349
CVE-2026-8349 affects the omec-project amf up to 2.1.1, specifically the NGAP Message Handler. A remote manipulation can cause memory corruption. An exploit has been published; a patch is available (hash: 8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa). Remediation: apply the pa...
CVE-2026-8349
A flaw has been found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGAP Message Handler. Executing a manipulation can lead to memory corruption. The attack can be launched remotely. The exploit has been published and may be used. This patch is called...
CVE-2026-8235
A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handler. The manipulation results in os command injection. The exploit is now public and may be used. The patch is...
CVE-2026-8213
A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit h...