CCC Attestation Hardware-Backed Attestation in TLS: Input Verification Error Vulnerability

CCC Attestation Hardware-Backed Attestation in TLS versions committed from 731ca82 and earlier has a vulnerability in input validation. This vulnerability arises from the failure to bind early authentication evidence to TLS connections. Attackers who possess the extracted private key for...

Mobatek mobaxterm: Input validation error vulnerability

The Mobatek Mobaxterm 26.4 GA version has a vulnerability related to input validation. This vulnerability arises from the lack of integrity verification for the CygUtils64 plugin file. A local attacker with write privileges can replace the bin/cygwin1.dll file with a malicious library. When the...

aircheng-org iWebShop: Input validation error vulnerability

aircheng-org iWebShop versions 5.16 and earlier have a vulnerability in input validation. This vulnerability stems from an improper handling of the callback parameter in the IController::redirect function within the Login Redirect component. This could lead to open redirection issues...

WordPress Classified Listing: Input validation error vulnerability

WordPress Classified Listing versions 6.1.5 and earlier have a vulnerability related to input validation errors. This vulnerability stems from improper validation of a specified number of inputs, which may allow attackers to access features that are not correctly constrained by ACLs...

CVE-2026-112058

A flaw was found in libdvdnav. An attacker could trigger a Denial of Service DoS by convincing a user to load a specially crafted DVD or disc image. Due to missing input validation in the setPTT function, an invalid title number causes the library to read memory beyond allocated boundaries, leadi...

Security update for squid (important)

openSUSE security update: security update for squid ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22080-1 Rating: important References: bsc1237027 bsc1260452 bsc1260453 bsc1260454 bsc1268272 bsc1268320 Cross-References: CVE-2026-32748 CVE-2026-335...

nic BIRD: Input validation error vulnerability

In versions nic BIRD 2.0.9 to 2.20.0, and 3.0.0 to 3.4.0, there is an input validation vulnerability caused by an IPv6 FlowSpec validation. This vulnerability allows components with non-zero offset destination prefixes to be accepted without being rejected. As a result, established BGP peers may ...

Plane Labs Plane: Input validation vulnerability

Plane Labs’ Plane 1.4.2 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper handling of the X-Forwarded-For parameter by the API Endpoint component. The system relies on untrusted inputs in its security decisions, which could allow...

EUVD-2026-41876

swoosh has email-derived URL path injection in Microsoft Graph endpoint...

Thorsten Rinne phpMyFAQ input validation vulnerability

Thorsten Rinne’s phpMyFAQ versions from 4.2.0-alpha to 4.2.0-beta have a vulnerability related to input validation. This vulnerability stems from a storage-side cross-site scripting vulnerability in SvgSanitizer. Attackers can split script tags around removed markers, allowing for reassembly afte...

Coder input validation error vulnerability

Coder 2.0.0 to 2.34.8 versions had a vulnerability related to input validation errors. This vulnerability stemmed from the lack of cleanup of the r.URL.Path value in handleAPIKeySmuggling. It was vulnerable to open redirection attacks, allowing attackers to redirect users to the attacker’s site b...

Coder input validation error vulnerability

Versions of Coder 2.3.1 to 2.14.4, 2.15.x versions before 2.15.3, and 2.16.0 to 2.16.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper cleaning of the redirect query parameters on the login page. It may lead to open redirection attacks. Attackers...

WordPress PAYCOMET for WooCommerce: Cross-site Script Vulnerability

WordPress PAYCOMET for WooCommerce versions 5.45 and earlier have a cross-site scripting vulnerability. This vulnerability stems from improper input validation during page generation, which may lead to reflection-type cross-site scripting attacks...

CVE-2026-110916

An improper input validation flaw was found in the Desktop component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501886301...

Chromium CVE-2026-106263: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106226: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106185: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106396: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106331: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106299: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...