7009 matches found
PT-2026-53814
The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not properly validate uploaded files, allowing unauthenticated users to upload files containing malicious JavaScript such as HTML or SVG to a publicly accessible location, leading to Stored Cross-Site Scripting attac...
PYSEC-2026-553 TorchServe Server-Side Request Forgery vulnerability
Impact Remote Server-Side Request Forgery SSRF Issue: TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and...
MINI-JW7P-PV2F-R222
Bulletin has no description...
MINI-P7R9-C983-H879
Bulletin has no description...
Malicious code in tdata-grabber (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4c3b37df5e3d08d7bc6ad736e0231ed0dc655640ffdf0dc403f4029ace2787 Package name explicitly declares its purpose as harvesting Telegram Desktop session data tdata directory. The tdata folder contains live authenticate...
MINI-R65P-6H58-4VH6
Bulletin has no description...
WebOb: Location header normalization during redirect leads to open redirect
...
school-buslocation-sqli-cve
CVE-2026-XXXXX Unauthenticated SQL Injection in School Man...
MINI-HVFG-WVFJ-6G84
Bulletin has no description...
MINI-H6FF-R94Q-GX85
Bulletin has no description...
MINI-JR43-33PM-CWJ9
Bulletin has no description...
MINI-372W-P468-67MX
Bulletin has no description...
MINI-C5CG-HHC7-F4QM
Bulletin has no description...
ECHO-F07E-8DF7-39F4
Bulletin has no description...
CVE-2026-44889
A flaw was found in WebOb, a library for HTTP requests and responses. A remote attacker could exploit this vulnerability by influencing the HTTP Location header during a redirect. Due to improper normalization of the Location header, specifically how certain ASCII characters are handled, an...
MINI-4JVW-QW6Q-9797
Bulletin has no description...
GO-2026-5087 omec-project amf crashes when processing malformed LocationReports in github.com/omec-project/amf
omec-project amf crashes when processing malformed LocationReports in github.com/omec-project/amf...
CVE-2026-53018
A flaw was found in the Linux kernel's f2fs filesystem. During garbage collection, a race condition can occur when a page is moved and updated, but the system attempts to read it again from an outdated location. This can trigger a kernel bug, leading to a system crash and a denial of service DoS....