CVE-2026-95819: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this vulnerability is an unknown functionality of the file login.php. Such manipulation of the argument user/pass leads to sql injection. The attack may be performed...

CVE-2026-75432

An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent, and Scanner::PushIndentTo components...

CVE-2026-75432

An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent, and Scanner::PushIndentTo components...

CVE-2026-75682: Improper Neutralization of Special Elements used in an SQL Command

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...

CVE-2020-0688

CVE-2020-0688 Scanner This is a little dirty Script to Check for vulnerables Exchange Servers by CVE-2020-0688 It's written ugly and in PHP. Caution: It only checks if you have the actual CU update installed. That doesn't mean that you have installed the bugfix patch! Requirements You need php-cl...

CVE-2026-94381: Improper Privilege Management

MISP has a security issue that can let a user gain more access than their API key is supposed to allow. A read-only API key should only let someone view information. However, after logging in with such a key, a specific MISP function could accidentally restore the user’s normal account permission...

CVE-2026-61744: Authorization Bypass Through User-Controlled Key

InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, POST /api/barcode/ accepts an attacker-synthesized internal JSON barcode containing a lowercase model label and integer primary key, while BarcodeView uses IsAuthenticatedOrReadScope and requires only authentication or a...

CVE-2026-91867: Uncontrolled Resource Consumption

When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slowly can keep the fetch alive indefinitely and tie up the calling thread denial of service. Users are recommended to upgrade to version 3.2.4, which fixes thi...

CVE-2026-91864: Allocation of Resources Without Limits or Throttling

A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without counting it against its size limits, exhausting the heap denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

CVE-2026-91866: Allocation of Resources Without Limits or Throttling

A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do exponential amounts of work, pinning the CPU for a long time denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

CVE-2026-77165: Improper Access Control

File owners were unable to unlock TYPETOKEN locks placed by other users, leaving files permanently locked with no recovery path outside of the database...

CVE-2026-77166: Undefined Security Weakness

The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items...

CVE-2026-79319: Exposure of Sensitive Information to an Unauthorized Actor

Stencil core 4.43.5 is vulnerable to Incorrect Access Control...

exploit-priority-scanner

exploit-priority-scanner Vulnerability prioritization pipelin...

unruly

unruly Security scanner for backend-as-a-service databases...

CVE-2026-94084: Use After Free

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.responseheader with and without a transform...

vigolium v0.4.8

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

CVE-2026-77875: Insecure Storage of Sensitive Information

The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with suitable...

CVE-2026-94055: Use After Free

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

grype v0.119.0

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...