CVE-2026-88410: Missing Authentication for Critical Function

The graph.UDF in FalkorDB Redis module v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected behavior within the application...

CVE-2026-88409: Buffer Copy without Checking Size of Input

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the DecodeGrBMatrix function /v19/decodematrix.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88408: Stack-based Buffer Overflow

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/opaggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88407: Out-of-bounds Write

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-94383: Unrestricted Upload of File with Dangerous Type

The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension. The only sanitization applied was basename to strip path components and a check for empty or dot values. A site administrator could specify a filename with an arbitrary...

CVE-2026-88412

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88407

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-85219: Allocation of Resources Without Limits or Throttling

Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage...

CVE-2026-88412: Integer Overflow or Wraparound

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-67827

Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote Code Execution RCE via unauthenticated access to the setServerConfig API endpoint, which permits overwriting the ffmpeg.snap configuration parameter with arbitrary shell commands...

EulerOS Virtualization 2.10.0 : kernel (EulerOS-SA-2026-3863)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking u...

EUVD-2026-83748

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

Malicious code in @pwaplatform/module-sso-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f674867f67f5a8495dbc953913b6cc7c0d8b9d094161c660ca4dfd5449506ba @pwaplatform/[email protected] declares both preinstall and postinstall lifecycle scripts that execute payload.js on npm install...

MAL-2026-16299 Malicious code in @pwaplatform/module-sso-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f674867f67f5a8495dbc953913b6cc7c0d8b9d094161c660ca4dfd5449506ba @pwaplatform/[email protected] declares both preinstall and postinstall lifecycle scripts that execute payload.js on npm install...

CVE-2026-94032: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

PT-2026-95975

Name of the Vulnerable Software and Affected Versions itsourcecode Leave Management System version 1.0 Description A SQL injection flaw exists in the /module/department/index.php endpoint. This issue occurs when the ID argument is manipulated, allowing a remote attacker to execute arbitrary SQL...

PT-2026-95910

Name of the Vulnerable Software and Affected Versions itsourcecode Leave Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the DEPTID argument within an unknown function of the /module/department/controller.php file. SQL injection is a...

CVE-2026-93963: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

SUSE CVE-2026-78030

DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbmtype and dbmmldbm attributes in DBD::DBM. DBD::DBM passes the dbmtype and dbmmldbm connect attributes to require without checking that the value names a module. require treats a path-shaped string as a literal filename a...

AZL-103475 CVE-2026-78030 affecting package perl-DBI 1.652-1

DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbmtype and dbmmldbm attributes in DBD::DBM. DBD::DBM passes the dbmtype and dbmmldbm connect attributes to require without checking that the value names a module. require treats a path-shaped string as a literal filename a...