CVE-2026-8284

URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0...

CVE-2026-8284 Open Redirect in Universal Sotware's FlexCity

URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0...

EUVD-2026-46186

URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 through 11052026...

CVE-2026-8284 Open Redirect in Universal Sotware's FlexCity

URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0...

CVE-2026-8284

CVE-2026-8284: Open redirect vulnerability in Universal Software Inc. FlexCity (versions 5.536.0–11052026) allowing URL redirection to untrusted sites via input data manipulation. Affected product: FlexCity. Root cause details are not provided in the supplied documents. Impact as per CVSSv3.1: Co...

CVE-2026-8284

URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0...

CVE-2026-16336 trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect

A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAuth2/OIDC. Performing a manipulation of the argument redirecturi results in open redirect. It is possible to initiate t...

CVE-2026-16332 D-Link DNS-320 multi_uploadify.php unrestricted upload

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

[SECURITY] Fedora 43 Update: libtiff-4.7.2-1.fc43

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

CVE-2026-16330 D-Link DNS-320 uploadify.php unrestricted upload

A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argument https:/ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=fromcopylink causes unrestricted upload. Remote...

unbound security update

1.24.2-15 - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance 1.24.2-14 - Fix CVE-2026-41292: DoS via excessive EDNS options 1.24.2-13 - Add upstream unit test for CVE-2026-40622 1.24.2-12 - Fix CVE-2026-44390: DoS with large RRsets 1.24.2-11 - Fix CVE-2026-40622: cache...

PT-2026-62155

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description An issue exists in the Enterprise Config Management component of the Oracle Enterprise Manager Base Platform. An...

The vulnerability of the validate_push_nsh() function in the net_openvswitch/flow_netlink.c module, which is part of the Open vSwitch router support in Linux operating systems, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the validatepushnsh function in the netopenvswitch/flownetlink.c module, which is part of the Open vSwitch router support in Linux operating systems, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-61933

Name of the Vulnerable Software and Affected Versions FlexCity versions 5.536.0 through 5.541.0 Description An open redirect issue allows input data manipulation by redirecting users to untrusted sites. Recommendations Update FlexCity to version 5.542.0...

HTTP Response Splitting

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to HTTP Response Splitting via the X-Forwarded-Prefix HTTP header. An attacker can manipulate cookie attributes by injecting arbitrary values into the Set-Cookie path attribute,...

CVE-2026-44585 Paymenter: Broken object level authorization via service reference manipulation on ticket creation

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing...

CVE-2026-63107

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use...

CVE-2026-63832

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability occurs due to improper handling of Wi-Fi station additions, where the driver fails to adequately verify existing client connections. A remote attacker could exploit this by manipulating Wi-Fi authentication processes,...

CVE-2026-58484

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.listBackups reads each backup's manifest.json and trusts the manifest's path field. EnvironmentManager.pruneBackups later passes that trusted entry.path directly to rmSyncentry.path, recursive...

CVE-2026-13724

Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. Corporate Training Management System allows Input Data Manipulation. This issue affects Corporate Training Management System: before dd1a9df64...