CVE-2025-70828

CVE-2025-70828 Краткое описание В Datart v1.0.0-rc.3 обнаружена уязвимость произвольного чтения файлов. Приложение не выполняет должную проверку URL-адреса JDBC-соединения при настройке источника данных. Детали уязвимости Тип уязвимости: Неправильная проверка ввода CWE-20 / Произвольное чтение...

CVE-2025-65640

CVE-2025-65640 1. Informations sur la vulnérabilité ID CVE : CVE-2025-65640 actuellement RÉSERVÉ Type de vulnérabilité : Cross-Site Scripting stocké XSS Score CVSSv3 : 6.3 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N Fournisseur : Arket/Bluenext S.r.l. Produit : Globe Document Intelligence Version affecté...

CVE-2025-69848-security-advisories

Отражённый XSS в обработке ProtectedError в NetBox CVE-2025-69848 Обзор NetBox — это платформа с открытым исходным кодом для моделирования инфраструктурных ресурсов и управления IP-адресами. В логике обработки исключения ProtectedError существует уязвимость отражённого межсайтового скриптинга XSS...

NextJS-CVE-2025-29927

Voici un fichier README.md propre et informatif pour votre dépôt GitHub qui explique qu'il s'agit d'une application Next.js vulnérable pour CVE-2025-29927 et inclut un lien vers votre vidéo YouTube de configuration : 🔓 NextJS-CVE-2025-29927 - Application de démonstration vulnérable Il s'agit d'un...

POC-CVE-2026-19679

CVE-2026-19679 — недостаточная очистка имён загружаемых файлов проверка входных данных Статус: ПОДТВЕРЖДЕНО в лаборатории 6.7.2-14.el9 2026-08-20. POST /rest/auditFile с tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" вернул HTTP 200 и зарегистрировал AuditFile 1000002 — имя файла с...

CLEANSTART-2026-RH85110 Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query

Security vulnerability affects the sonarqube package. Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query...

CLEANSTART-2026-FS14470 flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input

Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input...

CLEANSTART-2026-ZU18134 Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)

Security vulnerability affects the sonarqube package. Reachable Assertion CWE-617 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...

CLEANSTART-2026-PP64708 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)

Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...

CLEANSTART-2026-LG94890 JLine is a Java library for handling console input

Security vulnerability affects the trino package. JLine is a Java library for handling console input...

EUVD-2026-92873

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...

CVE-2026-82989

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...

CVE-2026-105782

Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scrapy/spidermiddlewares/referer.py treated a Referrer-Policy response-header value that resembled a Python import path as a referrer policy class, imported the referenced object,...

CVE-2026-106353: Improper Input Validation

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: Low...

PT-2026-107003

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in Extensions allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can...

PT-2026-106881

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

PT-2026-106899

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in Compositing allows a remote attacker who has compromised the renderer process to spoof the address bar by using a crafted HTML page. Recommendations Update...

PT-2026-106936

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in the SignIn function allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and using a crafted...

ROS-20261006-73-0187

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2026-106632

In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: reject RTN UNREACHABLE input routes in icmp route lookup When the forward output route cannot be used in icmp route lookup, it enters the "reverse path" and calls ip route input on fl4 dec.daddr, the original packet's...