PT-2026-60014

A vulnerability was identified in ByteDance verl up to 0.7.1. Affected is the function math equal of the file prime math/grader.py. The manipulation leads to a sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to ...

CVE-2026-13587

A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parsebyblocktype of the file lightpcapng.c of the component LightPcapNg Parser. Performing a manipulation of the argument capturedpacketlength results in heap-based buffer overflow. It is possible to...

CVE-2026-48142

A flaw was found in NGINX. Remote, unauthenticated attackers can exploit a vulnerability in the ngxhttpcharsetmodule when specific charset configurations are present. This can lead to a heap buffer over-read, potentially causing limited disclosure of memory or a denial of service by restarting th...

PYSEC-2026-199

An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.http.HttpRequest.getsignedcookie in Django uses a non-injective salt derivation concatenating the cookie name and salt argument, which allows a remote attacker to use a cookie in a context different from the one wher...

CVE-2026-10691

A security flaw has been discovered in wonderwhy-er DesktopCommanderMCP up to 0.2.38. This impacts an unknown function of the file src/search-manager.ts of the component startsearch. Performing a manipulation of the argument SearchResult results in inefficient regular expression complexity. It is...

CVE-2026-7598

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such manipulation of the argument usernamelen/passwordlen leads to integer overflow. The attack may be launched remotely. The name of the patch is...

CVE-2026-7316

A vulnerability has been found in eiliyaabedini aider-mcp up to 667b914301aada695aab0e46d1fb3a7d5e32c8af. Affected is an unknown function of the file aidermcp.py of the component codewithai. The manipulation of the argument workingdir/editablefiles leads to command injection. The attack may be...

CVE-2026-6990

A vulnerability was found in projeto-siga siga 11.0.3.18. The affected element is an unknown function of the file /sigawf/app/responsavel/novo. Performing a manipulation of the argument Nome/Descrição results in cross site scripting. The attack can be initiated remotely. The exploit has been made...

CVE-2026-5986 Zod jsVideoUrlParser util.js getTime redos

A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1. The impacted element is the function getTime in the library lib/util.js. This manipulation of the argument timestamp causes inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit ha...

Linux net/ipv6/ila/ila_xlat.c Heap Buffer Overflow DoS

The vulnerability of the ilaxlatnlcmdgetmapping function in the net/ipv6/ila/ilaxlat.c module of the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

UBUNTU-CVE-2026-5313

A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function stbigifloadnext in the library stbimage.h of the component GIF Decoder. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and ma...

CVE-2026-4500

A vulnerability was identified in bagofwords1 bagofwords up to 0.0.297. This impacts the function generatedf of the file backend/app/ai/codeexecution/codeexecution.py. Such manipulation leads to injection. The attack may be launched remotely. The exploit is publicly available and might be used...

Linux kernel binder_alloc_set_vma binder_alloc_init Buffer Overflow DoS

The vulnerabilities of the binderallocsetvma and binderallocinit functions in the drivers/android/binderalloc.c file of the Linux kernel’s communication driver with Android cores are related to improper initialization. Exploiting these vulnerabilities can allow a remote attacker to compromise the...

Open vSwitch Router DoS

The vulnerability of the ovsdpcmdnew function in the netopenvswitch/datapath.c module, which is part of the Open vSwitch router support in Linux operating systems, is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux kernel USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the xhciplatremove function in the drivers/usb/host/xhci-plat.c file of the Linux kernel’s USB device driver framework is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-23520

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.2 Description The software does not properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests, potentially allowing attackers to bypass command approval restrictions. Attackers can craf...

Direct Rendering Infrastructure DRI Heap Buffer Overflow DoS

The vulnerability of the dpurmgetassignedresources function in the drivers/gpu/drm/msm/disp/dpu1/dpurm.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cau...

lwext4 Heap Buffer Overflow DoS

The vulnerability of the ext4direngetnamelen function in the lwext4 library, which relates to the issue of handling zero pointers when processing damaged EXT4 directory entries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2025-13190

A vulnerability was found in D-Link DIR-816L 206b09beta. This vulnerability affects the function scandirmain of the file /portal/ajaxexporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public a...

Linux SMB2 Set EA Remote Access

The vulnerability of the smb2setea function in the fs/smb/server/smb2misc.c module of the SMB subsystem in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain access to protected...