CVE-2026-54634

Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld sendraw command on TCP port 4532 reaches rigctlsendraw in tests/rigctlparse.c, which writes a NUL byte at bufbuflen + 1 outside its 200-byte stack buffer, and rigsendraw in...

CVE-2026-54634

Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2 , the unauthenticated rigctld send_raw command on TCP port 4532 contains two flaws: a stack out-of-bounds write in rigctl_send_raw() (writes a NUL byte past its 200-byte stack buffer) and an uninitialized m...

CVE-2026-54634 Hamlib: rigctld `send_raw` Stack Out-of-Bounds Write and Uninitialized Memory Disclosure

Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld sendraw command on TCP port 4532 reaches rigctlsendraw in tests/rigctlparse.c, which writes a NUL byte at bufbuflen + 1 outside its 200-byte stack buffer, and rigsendraw in...

CVE-2026-54633

PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-bounds read in PdfColorSpaceFilterIndexed::FetchScanLine in src/podofo/main/PdfColorSpaceFilter.cpp. PODOFOINVARIANT does not perform a...

EUVD-2026-82560

PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-bounds read in PdfColorSpaceFilterIndexed::FetchScanLine in src/podofo/main/PdfColorSpaceFilter.cpp. PODOFOINVARIANT does not perform a...

CVE-2026-54633 PoDoFo: Heap Out-of-Bounds Read in Indexed Color Space Image Decoding (FetchScanLine)

PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-bounds read in PdfColorSpaceFilterIndexed::FetchScanLine in src/podofo/main/PdfColorSpaceFilter.cpp. PODOFOINVARIANT does not perform a...

CVE-2026-84939

A flaw was found in Apache FreeMarker. A remote attacker could exploit a path traversal vulnerability in the template loading mechanism by providing a specially crafted, malformed locale identifier. This is possible if the localized lookup configuration setting is enabled, which is the default...

CVE-2026-54716

creationtimestamp| type| source ---|---|--- 2026-09-17 21:01:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqkg2c2ri2v 2026-09-17 21:02:49+00:00| seen| https://bsky.app/profile/potato.software/post/3mvqkhn6knz2c...

CVE-2026-54627

creationtimestamp| type| source ---|---|--- 2026-09-17 21:01:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqkeikbtr2w 2026-09-17 22:07:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvqo42eegg25 2026-09-18 01:00:04+00:00| seen|...

CVE-2026-92943

creationtimestamp| type| source ---|---|--- 2026-09-17 21:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqkeb2iga2v 2026-09-17 22:08:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvqo4knln62b 2026-09-18 00:50:04+00:00| seen|...

CVE-2026-68536

creationtimestamp| type| source ---|---|--- 2026-09-17 20:40:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvqj755n7y24...

CVE-2026-76187

creationtimestamp| type| source ---|---|--- 2026-09-17 20:40:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvqj73vbiq2t...

CVE-2026-75523

creationtimestamp| type| source ---|---|--- 2026-09-17 20:31:26+00:00| seen| https://gist.github.com/alon710/5b0e181a2056c4129c0abf0e0a3f21b2...

EUVD-2026-81098

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs...

GHSA-8WMF-6V46-5GFG OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Summary OpenTelemetry Go versions 1.5.0 through 1.44.0 can include trace exporter endpoint configuration in an internal diagnostic log emitted when an SDK TracerProvider is created. The default OpenTelemetry logger does not emit this event. Exposure requires an application to install a logger tha...

CVE-2026-86049 Jupyter Server: 5xx request logging leaks token-bearing Referer header values

Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyterserver/log.py copies the Referer header into a JSON header block without applying the token scrubbing used for the request URI. A request that returns HTTP 500 while the...

GHSA-3JHR-MXMX-38CX Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leak hashed_password and 2FA secrets via offsetGet()

Summary system/config/security.yaml's Twig sandbox policy allow-lists offsetget and offsetexists for Grav\Common\User\Interfaces\UserInterface. The concrete Grav\Common\User\DataUser\User class does not filter which fields offsetGet returns, so any sandboxed template with access to a User object...

CVE-2026-86462

creationtimestamp| type| source ---|---|--- 2026-09-17 20:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvqi3bzzum2t...

EUVD-2026-82417

Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSolrIndex.query forwards the client-controlled qt parameter through Apache SolrJ from search endpoints such as /d1/mn/v2/query/solr/ to its privileged Solr backend. An...

CVE-2026-50022 Metacat acts as unintended proxy to backend Apache SOLR engine

Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSolrIndex.query forwards the client-controlled qt parameter through Apache SolrJ from search endpoints such as /d1/mn/v2/query/solr/ to its privileged Solr backend. An...