CVE-2026-105280 Hex writes unverified package tarballs to standard output in mix hex.package fetch

Improper Validation of Integrity Check Value vulnerability in hexpm hex allows a package mirror to substitute the tarball that mix hex.package fetch PACKAGE VERSION --output - writes to standard output. Hex compares a fetched tarball's inner and outer checksums with the repository's signed regist...

CVE-2026-93693

Progress ShareFile Storage Zones Controller versions v5.12.6 and below are vulnerable to a vulnerability chain involving improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on the queue service. A remote unauthenticate...

CVE-2026-107429

Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Input Data Manipulation.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12...

CVE-2026-107429 WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability

Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Input Data Manipulation.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12...

CVE-2026-107429

The WordPress Paid Videochat Turnkey Site (ppv-live-webcams) plugin is vulnerable to an Improper Validation of Specified Quantity in Input vulnerability (CWE-1284) in versions up to and including 7.5.12 . This flaw allows for Input Data Manipulation . While the specific component or function is n...

CVE-2026-106605

The WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce plugin is vulnerable to an Improper Validation of Specified Quantity in Input vulnerability (CWE-1284) in versions n/a through 2.3.22 . This flaw allows for Input Data Manipulation . No specific root cause details, remed...

CVE-2026-19622: Authentication Bypass Using an Alternate Path or Channel

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests...

CVE-2026-107434: Improper Validation of Specified Quantity in Input

Subscriber Bypass Vulnerability in MicroPayments = 3.2.9 versions...

CVE-2026-86405

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1...

CVE-2026-85531

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1...

EUVD-2026-95755

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1...

CVE-2026-86405 Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1...

CVE-2026-86405

The Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module is affected by an improper verification of cryptographic signature vulnerability. This flaw allows for Signature Spoofing due to improper validation within the module. The vulnerability specifically affects version...

CVE-2026-85531 Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1...

EUVD-2026-95747

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1...

CVE-2026-85531

The OpenCart Virtual POS Module by Sipay Electronic Money and Payment Services Inc. is vulnerable to a payment validation bypass due to improper verification of cryptographic signatures. This flaw allows for Signature Spoofing by improper validation, affecting versions 26.8.2 before 26.9.1 . The ...

BIT-THRIFT-2026-94636 Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up

Improper handling of highly compressed data data amplification, Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-78016

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected by an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could exploit this flaw to cause Information exposure and Information tampering . No specific...

CVE-2026-78016

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure and Information...

PT-2026-108897

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1...