CVE-2026-50776: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...

CVE-2026-67854: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code...

CVE-2026-67925: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpoint /airag/chat/upload...

CVE-2026-74845: Unrestricted Upload of File with Dangerous Type

Official Document Management System developed by 2100 Technology has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

EUVD-2026-60355

Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...

CVE-2026-50774

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role . The vulnerability is classified with a CRITICAL base severity score of 9.8 , indicating high impact on confidentiality, integrity, and availability. While the exploitation method is ide...

PT-2026-76772

Name of the Vulnerable Software and Affected Versions RainyGao-Hithub DocSys version 2.02.80 Description A file upload flaw allows a remote attacker to execute arbitrary code on the system. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2026-67918: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint...

ROS-20260817-73-0206

The vulnerability in python-PyPDF2 is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260817-73-0214

The vulnerability in Vim is related to writing outside of the allowed range. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

EUVD-2026-60445

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

ROS-20260817-73-0202

The vulnerability in uriparser is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2026-39255

SteelSeries GG (macOS) v.107.0.0 is susceptible to a Buffer Overflow vulnerability. A remote attacker can exploit the libSSEdevice.dylib and dup_wcs components to achieve arbitrary code execution . No specific remediation or exploit links are provided in the documents.

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the net/core/gro.c component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Apache Tomcat Code Execution

The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260817-73-0209

The vulnerability in python-pillow is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2026-73056: Improper Restriction of Excessive Authentication Attempts

SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability in the CheckAuth middleware. The middleware accepts the API token Conf.Api.Token via an Authorization header Token/Bearer or a ?token= query parameter, and neither path is...

CVE-2026-12795

A flaw was found in BerriAI litellm. This vulnerability allows a remote attacker to bypass authentication within the SSO Debug Flow component by manipulating the json.dumps function. The successful exploitation of this flaw could lead to unauthorized access and potential information disclosure...

CVE-2026-72130 nvmet-auth: reject short AUTH_RECEIVE buffers

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTHRECEIVE buffers nvmetexecuteauthreceive trusts the AUTHRECEIVE allocation length after checking only that it is nonzero and matches the transfer length. In the SUCCESS1 and FAILURE1/default states, th...

EUVD-2026-58888

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTHRECEIVE buffers nvmetexecuteauthreceive trusts the AUTHRECEIVE allocation length after checking only that it is nonzero and matches the transfer length. In the SUCCESS1 and FAILURE1/default states, th...