CVE-2026-96552 sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function MD5.getMD5 of the file ssmpro/src/main/java/cn/sfturing/utils/MD5.java of the component User Password Handler. The manipulation leads to one-way hash without...

EUVD-2026-85626

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function MD5.getMD5 of the file ssmpro/src/main/java/cn/sfturing/utils/MD5.java of the component User Password Handler. The manipulation leads to one-way hash without...

CVE-2026-96552

A vulnerability exists in the sfturing hosp_order software (up to commit 627f426331da8086ce8fff2017d65b1ddef384f8) within the User Password Handler component. The issue is located in the MD5.getMD5 function of the file ssm_pro/src/main/java/cn/sfturing/utils/MD5.java, where the manipulation leads...

CVE-2026-96552 sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function MD5.getMD5 of the file ssmpro/src/main/java/cn/sfturing/utils/MD5.java of the component User Password Handler. The manipulation leads to one-way hash without...

CVE-2026-94181

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

CVE-2026-71465

RunAdHocCommand.buildargs appends limit as bare positional args.appendlimit instead of using args.extend'-l', limit like RunJob. A limit beginning with - is parsed as an ansible CLI option. Currently limited to short-circuit flags --version, --help since injected element displaces required patter...

CVE-2026-94181 Address Bar Spoof Risk; Missing Fullscreen Notification via Select Element

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

CVE-2026-94181

Affected versions of the Arc browser are susceptible to an address bar spoofing issue. An attacker can spoof the browser address bar by utilizing a element that triggers requestFullscreen without displaying the standard fullscreen notification. Exploitation details are not provided in the docume...

EUVD-2026-85565

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

CVE-2026-94181 Address Bar Spoof Risk; Missing Fullscreen Notification via Select Element

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

CVE-2026-71465 Automation-controller: automation-controller-container: automation-controller: ad-hoc command limit field allows cli argument injection into ansible executable

RunAdHocCommand.buildargs appends limit as bare positional args.appendlimit instead of using args.extend'-l', limit like RunJob. A limit beginning with - is parsed as an ansible CLI option. Currently limited to short-circuit flags --version, --help since injected element displaces required patter...

CVE-2026-71465

The automation-controller component within the Red Hat Ansible Automation Platform is vulnerable to command-line argument injection via the ad-hoc command limit field. The root cause is that RunAdHocCommand.build_args() appends the limit as a bare positional argument instead of using args.extend(...

EUVD-2026-85542

RunAdHocCommand.buildargs appends limit as bare positional args.appendlimit instead of using args.extend'-l', limit like RunJob. A limit beginning with - is parsed as an ansible CLI option. Currently limited to short-circuit flags --version, --help since injected element displaces required patter...

CVE-2026-71465 Automation-controller: automation-controller-container: automation-controller: ad-hoc command limit field allows cli argument injection into ansible executable

RunAdHocCommand.buildargs appends limit as bare positional args.appendlimit instead of using args.extend'-l', limit like RunJob. A limit beginning with - is parsed as an ansible CLI option. Currently limited to short-circuit flags --version, --help since injected element displaces required patter...

CVE-2026-71465

RunAdHocCommand.buildargs appends limit as bare positional args.appendlimit instead of using args.extend'-l', limit like RunJob. A limit beginning with - is parsed as an ansible CLI option. Currently limited to short-circuit flags --version, --help since injected element displaces required patter...

CVE-2026-71465

RunAdHocCommand.buildargs appends limit as bare positional args.appendlimit instead of using args.extend'-l', limit like RunJob. A limit beginning with - is parsed as an ansible CLI option. Currently limited to short-circuit flags --version, --help since injected element displaces required patter...

CVE-2026-96674

A flaw was found in alsa-lib. This vulnerability involves an integer overflow in the src/topology/ctl.c component, where combined topology element sizes are computed using 32-bit arithmetic. This allows an attacker to supply specially crafted topology files that can cause size calculations to wra...

Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)

Impact An unauthenticated JCR-SQL2 injection exists in the Smart Content category filter of the 2.x content query builder. Category IDs supplied through the public ?categories= query parameter are only trimmed and are then concatenated directly into a JCR-SQL2 WHERE clause, without the numeric...

GHSA-JG26-Q8HG-3PQ4 Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)

Impact An unauthenticated JCR-SQL2 injection exists in the Smart Content category filter of the 2.x content query builder. Category IDs supplied through the public ?categories= query parameter are only trimmed and are then concatenated directly into a JCR-SQL2 WHERE clause, without the numeric...

SQL Injection

Overview sulu/sulu is a highly extensible open-source PHP content management system based on the Symfony framework. Affected versions of this package are vulnerable to SQL Injection via the categories query parameter in the Smart Content category filter. An attacker can infer the existence of, an...