78402 matches found
Debian dla-4668 : sympa - security update
The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4668 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4668-1 [email protected] https://www.debian.org/lts/security/...
PT-2026-56023
Name of the Vulnerable Software and Affected Versions ajenti versions prior to 2.2.14 Description The browser-facing login and administrative UI contains a clickjacking weakness. This occurs because the core HTTP response path in ajenti-core/aj/http.py initializes an empty header list and finaliz...
Untrusted Content Masking for Web Agents with Security Guarantees
Defenses that provide security guarantees against prompt injection attacks rely on strict isolation between trusted instructions and untrusted data. In text-based environments such as tool-use APIs, this separation arises naturally: agents can reason from interface definitions without ever...
CVE-2026-38979
ajenti through v2.2.13 has a clickjacking weakness in the browser-facing login and administrative UI. In ajenti-core/aj/http.py, the core HTTP response path initializes an empty header list, forwards handler-added headers verbatim, and finalizes responses through WSGI startresponse without adding...
PT-2026-55876
uniFLOW Universal Login Manager ULM Standalone contains an information disclosure vulnerability that may allow an authenticated administrator to access sensitive configuration information through the ULM Remote User Interface RUI. Exploitation requires administrative privileges and may disclose...
CVE-2026-38979
The ajenti web admin panel (versions through v2.2.13 ) contains a clickjacking weakness in its browser-facing login and administrative UI. The root cause is located in ajenti-core/aj/http.py, where the core HTTP response path initializes an empty header list and finalizes responses via WSGI start...
Cisco Crosswork Network Controller Command Execution
The vulnerability of the web-based interface for controlling the Cisco Crosswork Network Controller CNC is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Fedora 43 : python-streamlink (2026-4d6aae2d33)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4d6aae2d33 advisory. streamlink 8.4.0 2026-05-06 - SECURITY: fixed arbitrary local file read via file:// URI in HLS and DASH CVE-2026-44353 / GHSA- hgqw-6m45-hw5f - Added:...
Google Chrome Resource Management Error Vulnerability (CNVD-2026-27216)
Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the V8 engine that allows objects to be reclaimed and then reused after their release. Attackers can...
[SECURITY] Fedora 44 Update: nextcloud-33.0.6-1.fc44
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
[SECURITY] Fedora 44 Update: python-streamlink-8.4.0-1.fc44
Streamlink is a command-line utility that pipes video streams from various services into a video player, such as VLC. The main purpose of Streamlink is to allow the user to avoid buggy and CPU heavy flash plugins but still be able to enjoy various streamed content. There is also an API available...
[SECURITY] Fedora 43 Update: nextcloud-33.0.6-1.fc43
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
[SECURITY] Fedora 43 Update: python-streamlink-8.4.0-1.fc43
Streamlink is a command-line utility that pipes video streams from various services into a video player, such as VLC. The main purpose of Streamlink is to allow the user to avoid buggy and CPU heavy flash plugins but still be able to enjoy various streamed content. There is also an API available...
PT-2026-55768
A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirm order. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been...
SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2026:2749-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2749-1 advisory. This update for perl-DBI fixes the following issues - CVE-2026-9698: DBI versions before 1.648 for Perl saved...
CVE-2026-14633 kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scripting
A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d911a04. This affects an unknown part of the file /index.php/api/product/set of the component Hidden REST API Endpoint. This manipulation of the argument title/description causes...
CVE-2026-14633 kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scripting
A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d911a04. This affects an unknown part of the file /index.php/api/product/set of the component Hidden REST API Endpoint. This manipulation of the argument title/description causes...
EUVD-2026-41678
A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce. Affected by this issue is the function setReferrer of the file application/core/MYController.php of the component Trusted Backend Interface. The manipulation of the argument hr...
CVE-2026-14632
A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce. Affected by this issue is the function setReferrer of the file application/core/MYController.php of the component Trusted Backend Interface. The manipulation of the argument hr...