CVE-2026-19481

A flaw was found in @fastify/busboy, a multipart form-data parser. A remote attacker can exploit this vulnerability by sending specially crafted multipart form-data headers. This can cause a TypeError in the parser, leading to the termination of the Node.js process and resulting in an...

EUVD-2026-60554

SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code...

PT-2026-77149

Name of the Vulnerable Software and Affected Versions Brainstorm Force SureForms versions prior to 2.12.2 Description The CSV export functionality fails to neutralize spreadsheet formula characters in user-controlled form field names before generating exports. This allows a remote attacker to...

CVE-2026-71675

An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service (DoS). The vulnerability originates from the ngap_send_to_nas() function located in the src/amf/ngap-path.c file. No specific remediation information or exploit details are provided in the documents.

CVE-2026-52610

The software reportico-web (version

SureForms 2.1.2 CSV Injection

SureForms version 2.1.2 and below contains an unauthenticated CSV injection vulnerability. A remote attacker can submit a specially crafted form field containing an encoded spreadsheet formula that is subsequently included in exported CSV data. When an administrator exports the submissions and...

PT-2026-77217

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...

CVE-2026-71676

Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS PDU is mutated...

ROS-20260818-73-0011

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

PT-2026-77328

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description An information leak in Skia allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one...

CVE-2026-76041: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-76047: Access of Resource Using Incompatible Type

Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76042: Use of Uninitialized Resource

Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76034: Heap-based Buffer Overflow

Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-19500: Uncontrolled Resource Consumption

The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing th...

CVE-2026-52480: Missing Authentication for Critical Function

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...

ROS-20260818-73-0029

The vulnerability in MariaDB relates to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ROS-20260818-73-0037

The vulnerability in portainer-ce is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2026-77148

Name of the Vulnerable Software and Affected Versions Brainstorm Force SureForms versions prior to 2.12.3 Description The Entries component fails to enforce adequate limits on user-controlled form fields or submitted content during processing and rendering. This allows a remote attacker to exhaus...

CVE-2026-30250: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...