aircheng-org iWebShop: Input validation error vulnerability

aircheng-org iWebShop versions 5.16 and earlier have a vulnerability in input validation. This vulnerability stems from an improper handling of the callback parameter in the IController::redirect function within the Login Redirect component. This could lead to open redirection issues...

Sunkaifei FlyCms input validation error vulnerability

Sunkaifei FlyCms has a vulnerability in input validation. This vulnerability stems from the batch assignment issue in the /ucenter/accountupdate interface. It allows authenticated users to submit additional User Bean fields to override protected account columns. This may result in changes such as...

LangBot input validation vulnerability

LangBot versions 4.11.0 and earlier have a vulnerability related to input validation. This vulnerability stems from the lack of authenticity verification; signatures are not checked, allowing unauthorized attackers to inject forged Lark/Feishu events with knowledge of the robot’s UUID. These...

BlackBelt Technology PI Dashboard: Input validation error vulnerability

The BlackBelt Technology PI Dashboard versions prior to 0.8.0 have a vulnerability related to input validation errors. This vulnerability stems from improper handling of the cwd parameter by the unknown function in the WebSocket Gateway component, resulting in source validation errors that can be...

MLJAR mercury input validation error vulnerability

The MLJAR Mercury version 3.0.0 to 3.2.4 had a security vulnerability. This vulnerability stemmed from the lack of a comma in BLOCKEDPATTERNS, allowing the concatenation of /lab and/api/terminals regular expression literals. As a result, API/terminals requests bypassed the anonymous endpoint...

CVE-2026-112058

A flaw was found in libdvdnav. An attacker could trigger a Denial of Service DoS by convincing a user to load a specially crafted DVD or disc image. Due to missing input validation in the setPTT function, an invalid title number causes the library to read memory beyond allocated boundaries, leadi...

Security update for squid (important)

openSUSE security update: security update for squid ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22080-1 Rating: important References: bsc1237027 bsc1260452 bsc1260453 bsc1260454 bsc1268272 bsc1268320 Cross-References: CVE-2026-32748 CVE-2026-335...

nic BIRD: Input validation error vulnerability

In versions nic BIRD 2.0.9 to 2.20.0, and 3.0.0 to 3.4.0, there is an input validation vulnerability caused by an IPv6 FlowSpec validation. This vulnerability allows components with non-zero offset destination prefixes to be accepted without being rejected. As a result, established BGP peers may ...

Plane Labs Plane: Input validation vulnerability

Plane Labs’ Plane 1.4.2 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper handling of the X-Forwarded-For parameter by the API Endpoint component. The system relies on untrusted inputs in its security decisions, which could allow...

EUVD-2026-41876

swoosh has email-derived URL path injection in Microsoft Graph endpoint...

WordPress PAYCOMET for WooCommerce: Cross-site Script Vulnerability

WordPress PAYCOMET for WooCommerce versions 5.45 and earlier have a cross-site scripting vulnerability. This vulnerability stems from improper input validation during page generation, which may lead to reflection-type cross-site scripting attacks...

Coder input validation error vulnerability

Coder 2.0.0 to 2.34.8 versions had a vulnerability related to input validation errors. This vulnerability stemmed from the lack of cleanup of the r.URL.Path value in handleAPIKeySmuggling. It was vulnerable to open redirection attacks, allowing attackers to redirect users to the attacker’s site b...

Coder input validation error vulnerability

Versions of Coder 2.3.1 to 2.14.4, 2.15.x versions before 2.15.3, and 2.16.0 to 2.16.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper cleaning of the redirect query parameters on the login page. It may lead to open redirection attacks. Attackers...

Thorsten Rinne phpMyFAQ input validation vulnerability

Thorsten Rinne’s phpMyFAQ versions from 4.2.0-alpha to 4.2.0-beta have a vulnerability related to input validation. This vulnerability stems from a storage-side cross-site scripting vulnerability in SvgSanitizer. Attackers can split script tags around removed markers, allowing for reassembly afte...

CVE-2026-110916

An improper input validation flaw was found in the Desktop component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501886301...

Chromium CVE-2026-106299: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106226: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106331: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106185: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106396: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...