CVE-2026-37470

The open-source PHP script ClipBucket v5 v.5.5.2 , used for creating video-sharing websites, contains a security vulnerability that allows an attacker to execute arbitrary code . The root cause is located within the Authentication interface , the login page endpoint , and the HTTP response securi...

PT-2026-42800

An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components...

CVE-2026-37470

An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components...

Open WebUI Unauthorized Access

The vulnerability of the Open WebUI-based web interface is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Open WebUI Web Interface XSS

The vulnerability in the Open WebUI web interface is related to the lack of protection for the structure of the web page when processing the profileimageurl field. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

PT-2026-61273

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists in the cypress m8 USB serial driver. A malicious device reporting an interrupt-out endpoint max packet size of less than eight bytes can trigger...

CVE-2026-37470: Improper Restriction of Rendered UI Layers or Frames

An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components...

CVE-2026-37470

An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components...

Devolutions Server security vulnerabilities

Devolutions Server is an application system developed by the Canadian company Devolutions. It provides a fully functional solution for shared accounts and password management. Versions of Devolutions Server from 2026.1.6.0 to 2026.1.16.0, as well as versions prior to 2025.3.20.0, have security...

CVE-2026-37470

An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components...

PAN-OS Web Interface Arbitrary Command Execution

The vulnerability of the PAN-OS operating system’s web interface is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands remotely...

Open WebUI Authentication Bypass

The vulnerability in the Open WebUI web interface relates to bypassing authentication using a key controlled by the user during the processing of the final endpoint /api/chat/completions. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

Open WebUI XSS

The vulnerability of the Open WebUI web interface is related to deficiencies in the security measures used to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a malicious SVG file...

Open WebUI Authentication Privilege Escalation

The vulnerability of the Open WebUI web interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges and disclose sensitive information...

Open WebUI AI-based web interface _validate_collection_access() Unauthorized Access

The vulnerability of the validatecollectionaccess function in the Open WebUI AI-based web interface relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Mattermost security vulnerabilities

Mattermost is an open-source collaboration platform developed by the American company Mattermost. Vulnerabilities exist in versions of Mattermost 11.6.0 and earlier 11.6.x series, as well as versions prior to 11.5.3 11.5.x series, 11.4.4 and earlier 11.4.x series, and 10.11.14 and earlier 10.11.x...

CVE-2026-39832

When adding a key to a remote agent constraint extensions such as [email protected] were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all...

Drupal CMS RCE

The vulnerability of the application software interface of the Drupal CMS system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code...

Open WebUI Authentication Bypass

The vulnerability in the Open WebUI web interface relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Open WebUI Authentication DoS

The vulnerability of the Open WebUI web interface is related to the lack of authentication during the processing of the final endpoint /api/v1/memories/ef. Exploiting this vulnerability allows a malicious actor to cause service failures by sending a specially crafted GET request...