992105 matches found
CVE-2026-61371
Microsoft AVML versions prior to 0.17.0 are vulnerable to a truncation-before-validation flaw on Unix systems. The software can follow a symlink when opening a destination output path, enabling an attacker to trigger a destructive truncation or overwrite of the symlink target. This occurs at open...
CVE-2026-62294: Concurrent Execution using Shared Resource with Improper Synchronization
Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacker on the same machine to pre-plant a...
CVE-2026-42533: Heap-based Buffer Overflow
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
CVE-2026-42533: Heap-based Buffer Overflow
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
PT-2026-60211
Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The destructive effect is performed at open-time via O TRUNC, and can happen before full input validation completes “truncation-before-validatio...
PT-2026-60367
MantisBT 2.28.3 and earlier contains six reflected XSS injection points in /admin/install.php. User-supplied parameters are echoed into HTML without escaping via print test result. No authentication is required. A Content Security Policy script-src 'self' prevents inline JavaScript execution, but...
PT-2026-60309
Name of the Vulnerable Software and Affected Versions GPT Researcher version 3.3.7 Description An issue allows attackers to execute arbitrary commands on a victim system through command injection. This occurs when a user interacts with a specially crafted HTML page, and no authentication is...
CVE-2026-60005: Use of Uninitialized Resource
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...
CVE-2025-65720
An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...
PT-2026-60119
Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow where the picture claim URL MIME type is inferred from file extension rather than Content-Type header, allowing SVG files to bypass the profile image validator and be stored as data URIs...
PT-2026-60325
Name of the Vulnerable Software and Affected Versions Qinglong versions prior to 2.20.1 Description An authentication bypass exists in the init guard middleware located in back/loaders/express.ts. The system validates the /api/user/init endpoint but fails to check /open/user/init. Because the...
CVE-2025-65720
An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...
CVE-2025-65720
An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...
Open WebUI AI-based web interface SSRF
The vulnerability of the processpictureurl function in the backend/openwebui/utils/oauth.py file of the Open WebUI artificial intelligence-based web interface is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to perform an SSRF...
OData Unlimited Resource Distribution DoS
The vulnerability of libraries for integrating the OData protocol in modern ASP.NET-based web applications, such as Microsoft.AspNet.OData and Microsoft.AspNetCore.OData, is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service...
SUSE SLED15 / SLES15 Security Update : python-WebOb (SUSE-SU-2026:2982-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2982-1 advisory. This update for python-WebOb fixes the following issue - CVE-2026-44889: Location header normalization during redirect...
CVE-2026-60005: Use of Uninitialized Resource
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...
CVE-2026-61371
Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The destructive effect is performed at open-time via OTRUNC, and can happen before full input validation completes “truncation-before-validation...
Open Redirect
Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Open Redirect via the redirect process. An attacker can redirect users to an external, attacker-controlled website by crafting a malicious URL and convincing a user to clic...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in OpenSSL
Summary OpenSSL for IBM i is vulnerable to out-of-bounds read when parsing a crafted DER-encoded ASN.1 structure with a 2 gigabyte primitive element or when using Cryptographic Message Services CMS password-based decryption and processing a stream-mode KEK cipher CVE-2026-34180, CVE-2026-9076,...