CVE-2026-24347: Improper Input Validation

Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate files in the /tmp directory...

CVE-2026-0919: Improper Input Validation

The HTTP parser of Tapo C210 v3, C220 v1 and C520WS v2 cameras improperly handles requests containing an excessively long URL path. An invalid‑URL error path continues into cleanup code that assumes allocated buffers exist, leading to a crash and service restart. An unauthenticated attacker can...

CVE-2026-0925

Tanium addressed an improper input validation vulnerability in Discover...

CVE-2026-0925 Tanium addressed an improper input validation vulnerability in Discover.

Tanium addressed an improper input validation vulnerability in Discover...

EUVD-2026-4676

Tanium addressed an improper input validation vulnerability in Discover...

Tanium Discover security vulnerabilities

Tanium Discover is an asset scanning module developed by the American company Tanium. Tanium Discover has a security vulnerability, which stems from improper input validation...

CVE-2026-0925: Improper Validation of Specified Quantity in Input

Tanium addressed an improper input validation vulnerability in Discover...

PT-2026-4800

Name of the Vulnerable Software and Affected Versions Tanium Discover affected versions not specified Description Tanium Discover contains an improper input validation issue. The issue involves insufficient validation of user-supplied data, potentially leading to unexpected behavior or compromise...

CVE-2026-24307

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network...

CVE-2026-1225: Improper Input Validation

ACE vulnerability in configuration file processing by QOS.CH logback-core up to and including version 1.5.24 in Java applications, allows an attacker to instantiate classes already present on the class path by compromising an existing logback configuration file. The instantiation of a potentially...

Exploit for Improper Input Validation in N8N

No d...

CVE-2026-22444: Improper Input Validation

The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to check the existence of and attempt to read file-system paths that should be disallowed by Solr's "allowPaths" security setting...

CVE-2026-23736: Improperly Controlled Modification of Object Prototype Attributes

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, due to improper input validation, a malicious object key can lead to prototype pollution during JSON deserialization. This vulnerability affects only JSON...

CVE-2026-22598: Improper Input Validation

ManageIQ is an open-source management platform. A flaw was found in the ManageIQ API prior to version radjabov-2 where a malformed TimeProfile could be created causing later UI and API requests to timeout leading to a Denial of Service. Version radjabov-2 contains a patch. One may also apply the...

CVE-2025-66959: Improper Input Validation

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder...

CVE-2025-66960: Improper Input Validation

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF metadata...

CVE-2025-68134: Improper Input Validation

EVerest is an EV charging software stack. Prior to version 2025.10.0, the use of the assert function to handle errors frequently causes the module to crash. This is particularly critical because the manager shuts down all other modules and exits when any one of them terminates, leading to a denia...

Improper Input Validation

Overview websocket-server is an A simple fully working websocket-server in Python with no external dependencies Affected versions of this package are vulnerable to Improper Input Validation via the WebSocketServer.messagereceived component. An attacker can access sensitive information or trigger...

Exploit for Improper Input Validation in Cacti

CVE-2...

CVE-2025-66902: Improper Input Validation

An input validation issue in in Pithikos websocket-server v.0.6.4 allows a remote attacker to obtain sensitive information or cause unexpected server behavior via the websocketserver/websocketserver.py, WebSocketServer.messagereceived components...