210247 matches found
PT-2026-82665
Name of the Vulnerable Software and Affected Versions crewai-tools version 1.10.2rc1 Description A SQL injection issue exists in the NL2SQLTool component. A remote attacker can execute arbitrary SQL commands by providing an unsanitized sql query argument. SQL injection is a technique where...
UltraJSON 5.13.0-6-g733f9e1 Out-Of-Bounds Read
UltraJSON version 5.13.0-6-g733f9e1 suffers from an out of bounds read vulnerability. UltraJSON contains an out-of-bounds read in its native C JSON decoder when processing certain incomplete JSON values supplied through an explicitly length-bounded input buffer. The affected native entry point,...
PT-2026-82718
Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.8 Spring Framework versions 6.2.0 through 6.2.19 Spring Framework versions 6.1.0 through 6.1.28 Spring Framework versions 6.0.0 through 6.0.30 Spring Framework versions 5.3.0 through 5.3.49 Spring...
PT-2026-82545
Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.8 Spring Framework versions 6.2.0 through 6.2.19 Spring Framework versions 6.1.0 through 6.1.28 Spring Framework versions 6.0.0 through 6.0.30 Spring Framework versions 5.3.0 through 5.3.49 Spring...
CVE-2026-59280: Improper Limitation of a Pathname to a Restricted Directory
Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through SpringTemplateLoader. Spring Framework 7.0.0 - 7.0.8 Spring...
ROS-20260827-73-0017
The vulnerability of the nullinittagset function in the drivers/block/nullblk/main.c module of the Linux kernel’s block devices driver is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux NFC Driver Heap Buffer Overflow DoS
The vulnerability of the s3fwrn82uartread function in the drivers/nfc/s3fwrn5/uart.c file of the Linux NFC driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...
Tenda CH22 Router Command Execution
The vulnerability of the formexeCommand function in the Tenda CH22 router’s microprogramming system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Tenda CH22 Router Code Execution
The vulnerability of the formeditFileName function in the Tenda CH22 router’s software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Secure Kernel Mode Privilege Escalation
The vulnerability of the Secure Kernel Mode feature in Windows operating systems is related to improper checking of consistency in input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2026-30064
Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
Exploit for Improper Input Validation in Microsoft
CVE-2023-23397 — Purple Team: Exploit + Detection Two halves...
CVE-2026-63360
LimeSurvey Community Edition 7.0.5+260623 contains an authenticated reflected Cross-Site Scripting vulnerability in the user activation confirmation endpoint. The action query parameter is copied into the response and inserted into a hidden input attribute without HTML attribute encoding. This...
CVE-2026-21809
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...
CVE-2026-63360 LimeSurvey Community Edition 7.0.5 - Reflected XSS in user activation confirmation endpoint
LimeSurvey Community Edition 7.0.5+260623 contains an authenticated reflected Cross-Site Scripting vulnerability in the user activation confirmation endpoint. The action query parameter is copied into the response and inserted into a hidden input attribute without HTML attribute encoding. This...
CVE-2026-63360
LimeSurvey Community Edition 7.0.5+260623 contains an authenticated reflected Cross-Site Scripting (XSS) vulnerability in the user activation confirmation endpoint . The root cause is that the action query parameter is copied into the response and inserted into a hidden input attribute without HT...
CVE-2026-63360 LimeSurvey Community Edition 7.0.5 - Reflected XSS in user activation confirmation endpoint
LimeSurvey Community Edition 7.0.5+260623 contains an authenticated reflected Cross-Site Scripting vulnerability in the user activation confirmation endpoint. The action query parameter is copied into the response and inserted into a hidden input attribute without HTML attribute encoding. This...
CVE-2026-64781
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper input validation. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...
CVE-2026-75414
In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerability...
CVE-2026-21809 HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...