261851 matches found
CVE-2026-42211
A flaw was found in React Router when operating in Framework Mode. A remote attacker could exploit an existing prototype pollution vulnerability within the application code. This could lead to unauthorized remote code execution RCE on the server through a two-step attack involving external...
Exploit for CVE-2026-63030
CVE-2026-63030: WordPress REST API Batch Route Confusion to SQ...
Exploit for CVE-2026-63030
CVE-2026-63030: WordPress REST API Batch Route Confusion to SQ...
Exploit for CVE-2026-60137
/ / / / / / | |/ / \ / /...
CVE-2026-64061
A flaw was found in the Linux kernel's network file system netfs. This use-after-free vulnerability occurs when the netfsreadgaps function prematurely releases a memory page during network read operations. A remote attacker could exploit this by sending specially crafted network traffic, leading ...
httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc
A flaw was found in Apache HTTP Server, specifically within the modxml2enc module. This heap-based buffer overflow vulnerability can be triggered when processing untrusted content through the xml2StartParse function. A remote attacker could potentially exploit this to cause a denial of service,...
libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...
Important: Red Hat Security Advisory: evince security update
An update for evince is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Exploit for CVE-2026-63030
CVE-2026-63030 - WordPress REST API Batch Route Confusion PoC...
PT-2026-61735
Name of the Vulnerable Software and Affected Versions GRAPHIFY versions 0.3.2 through 0.4.29 Description A remote attacker can execute arbitrary code through the validate url, safe fetch, build opener, fetch html, and download binary functions. Recommendations At the moment, there is no informati...
IBM Langflow OSS code injection vulnerability (CNVD-2026-31205)
IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to...
VulnCheck KEV: CVE-2026-4480
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...
VulnCheck KEV: CVE-2026-50522
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
The vulnerability of the GDI+ component in Windows operating systems allows attackers to execute arbitrary code.
The vulnerability of the GDI+ component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-52656
CVE-2026-52656 affects SJCAM AllWinner Tech SJ4000-Air prior to v1.4C and Whitelabel-based prior to v1.4C. The issue allows an attacker to execute arbitrary code via a specially crafted FEX file. Connected sources confirm affected versions and vulnerability class; PT-2026-61058 notes no public fi...
The vulnerability of the JIT-compiler of the Mozilla Firefox browser allows a hacker to execute arbitrary code.
The vulnerability of the JIT-compiler of the Mozilla Firefox browser is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-51385
An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validateurl, safefetch, buildopener, fetchhtml and downloadbinary functions...
TencentOS Server 3: cups (TSSA-2026:0630)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0630 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
TencentOS Server 3: gstreamer1-plugins-good (TSSA-2026:0628)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0628 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2026-1951)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1951 advisory. gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guar...