Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation. This vulnerability arises when the FopProducer creates a TransformerFactory by enabling only FEATURESECUREPROCESSING, without restricting access to external resources...

Viraj Potdar Criminal Management System: Input validation error vulnerability

The Viraj Potdar Criminal Management System has a security vulnerability, which stems from incorrect handling of the Search parameter in the file search.php. This could lead to SQL injection attacks...

DeepPavlov Team: Vulnerability in input validation

The DeepPavlov team has identified a security vulnerability in versions 1.7.0 and earlier of DeepPavlov. This vulnerability stems from improper handling of the resolve function in the Config Reference Resolver component’s deeppavlov/core/common/params.py file, which may lead to remote code...

MISP input validation error vulnerability

Versions of MISP 2.5.48 and earlier contain a vulnerability related to input validation errors. This vulnerability arises from the remote event preview feature improperly validating tag value colors before directly writing them into inline CSS style properties. This can lead to arbitrary CSS...

Apache Camel input validation vulnerability

Versions of Apache Camel prior to 4.18.5, specifically 4.0.0 and 4.22.1 prior to 4.19.0, have a vulnerability related to input validation errors. This vulnerability arises from the Saga processor using a Long-Running-Action header without the Camel prefix to determine which saga the exchange...

Hono input validation vulnerability

Versions of Hono from 4.12.4 to 4.13.11 had a vulnerability in input validation. This vulnerability stemmed from serveStatic’s secondary decoding of routing request paths before file system lookup. As a result, malformed percent-encoded paths bypassed the protection provided by upstream middlewar...

Apache Camel input validation vulnerability

Versions of Apache Camel Netty HTTP from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability arises due to the camel-netty-http security constraint using case-sensitive matching when comparing the request path with the configure...

aircheng-org iWebShop: Input validation error vulnerability

aircheng-org iWebShop versions 5.16 and earlier have a vulnerability in input validation. This vulnerability stems from an improper handling of the callback parameter in the IController::redirect function within the Login Redirect component. This could lead to open redirection issues...

Sunkaifei FlyCms input validation error vulnerability

Sunkaifei FlyCms has a vulnerability in input validation. This vulnerability stems from the batch assignment issue in the /ucenter/accountupdate interface. It allows authenticated users to submit additional User Bean fields to override protected account columns. This may result in changes such as...

LangBot input validation vulnerability

LangBot versions 4.11.0 and earlier have a vulnerability related to input validation. This vulnerability stems from the lack of authenticity verification; signatures are not checked, allowing unauthorized attackers to inject forged Lark/Feishu events with knowledge of the robot’s UUID. These...

BlackBelt Technology PI Dashboard: Input validation error vulnerability

The BlackBelt Technology PI Dashboard versions prior to 0.8.0 have a vulnerability related to input validation errors. This vulnerability stems from improper handling of the cwd parameter by the unknown function in the WebSocket Gateway component, resulting in source validation errors that can be...

MLJAR mercury input validation error vulnerability

The MLJAR Mercury version 3.0.0 to 3.2.4 had a security vulnerability. This vulnerability stemmed from the lack of a comma in BLOCKEDPATTERNS, allowing the concatenation of /lab and/api/terminals regular expression literals. As a result, API/terminals requests bypassed the anonymous endpoint...

CVE-2026-112058

A flaw was found in libdvdnav. An attacker could trigger a Denial of Service DoS by convincing a user to load a specially crafted DVD or disc image. Due to missing input validation in the setPTT function, an invalid title number causes the library to read memory beyond allocated boundaries, leadi...

Security update for squid (important)

openSUSE security update: security update for squid ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22080-1 Rating: important References: bsc1237027 bsc1260452 bsc1260453 bsc1260454 bsc1268272 bsc1268320 Cross-References: CVE-2026-32748 CVE-2026-335...

Plane Labs Plane: Input validation vulnerability

Plane Labs’ Plane 1.4.2 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper handling of the X-Forwarded-For parameter by the API Endpoint component. The system relies on untrusted inputs in its security decisions, which could allow...

nic BIRD: Input validation error vulnerability

In versions nic BIRD 2.0.9 to 2.20.0, and 3.0.0 to 3.4.0, there is an input validation vulnerability caused by an IPv6 FlowSpec validation. This vulnerability allows components with non-zero offset destination prefixes to be accepted without being rejected. As a result, established BGP peers may ...

EUVD-2026-41876

swoosh has email-derived URL path injection in Microsoft Graph endpoint...

WordPress PAYCOMET for WooCommerce: Cross-site Script Vulnerability

WordPress PAYCOMET for WooCommerce versions 5.45 and earlier have a cross-site scripting vulnerability. This vulnerability stems from improper input validation during page generation, which may lead to reflection-type cross-site scripting attacks...

Coder input validation error vulnerability

Coder 2.0.0 to 2.34.8 versions had a vulnerability related to input validation errors. This vulnerability stemmed from the lack of cleanup of the r.URL.Path value in handleAPIKeySmuggling. It was vulnerable to open redirection attacks, allowing attackers to redirect users to the attacker’s site b...

Coder input validation error vulnerability

Versions of Coder 2.3.1 to 2.14.4, 2.15.x versions before 2.15.3, and 2.16.0 to 2.16.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper cleaning of the redirect query parameters on the login page. It may lead to open redirection attacks. Attackers...