5062949 matches found
CVE-2026-77607
Semantic MediaWiki , a free open-source MediaWiki extension, had a reflected XSS vulnerability in versions prior to 7.2.0 . The sep parameter in the Special:Ask table renderer was inserted verbatim into HTML cell joins, allowing an attacker to inject arbitrary HTML through the separator value. Pe...
Exploit for CVE-2026-18464
CVE-2026-18464 — WP Maps Pro This repository is intended as a...
Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS
Failure mode sep was inserted verbatim into the HTML that joins a table cell's values. This made it possible to inject HTML through the separator value. The same unsanitised table HTML is produced both for the standard Special:Ask render and for its raw request output requesttype=raw, so the...
GHSA-7XV3-GF2G-498H Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS
Failure mode sep was inserted verbatim into the HTML that joins a table cell's values. This made it possible to inject HTML through the separator value. The same unsanitised table HTML is produced both for the standard Special:Ask render and for its raw request output requesttype=raw, so the...
CVE-2026-63405
AnyCable is a realtime server supporting any backend. Prior to 1.6.15 , its Pusher-compatible REST API (in pusher/http.go) includes the caller-supplied body_md5 value in the HMAC signature but never computes or verifies the MD5 of the actual received body. Because there is also no auth_timestamp ...
CVE-2026-63405 AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body
AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the Pusher-compatible REST API in pusher/http.go includes the caller-supplied bodymd5 value in the HMAC input but does not calculate the digest of the received request body or compare it...
EUVD-2026-83180
AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the Pusher-compatible REST API in pusher/http.go includes the caller-supplied bodymd5 value in the HMAC input but does not calculate the digest of the received request body or compare it...
CLSA-2026-1789750026 TuxCare security update for 2 packages (1 CVE)
TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 1.24.0-tuxcare.1...
CVE-2026-46655
The Viosock driver (viosock.sys) in virtio-win (versions mm210 through mm319) is vulnerable to a local privilege escalation in Windows guests running QEMU or KVM. A low-privilege process can submit an IOCTL_SELECT request with crafted VIRTIO_VSOCK_SELECT.Fdss[*].fd_count values that cause an inte...
CVE-2026-46655 virtio-win: Integer overflow causing a heap overflow in Viosock driver
virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTLSELECT request with attacker-controlled VIRTIOVSOCKSELECT.Fdss.fdcount values that overflow the 32-bit sum used by VIOSockSelect...
EUVD-2026-83179
virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTLSELECT request with attacker-controlled VIRTIOVSOCKSELECT.Fdss.fdcount values that overflow the 32-bit sum used by VIOSockSelect...
CVE-2026-77239 WACRM: Service-role routes missing a role check
WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent role before using a service-role database client that bypasses row-level security. In src/app/api/flows/id/route.ts,...
EUVD-2026-83178
WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent role before using a service-role database client that bypasses row-level security. In src/app/api/flows/id/route.ts,...
CVE-2026-77239 WACRM: Service-role routes missing a role check
WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent role before using a service-role database client that bypasses row-level security. In src/app/api/flows/id/route.ts,...
CVE-2026-77239
WACRM (a self-hostable CRM template for WhatsApp) versions 0.7.0 and earlier have an authorization flaw in flow and automation write routes. The routes authenticate account viewers but fail to enforce the agent role before invoking a service-role database client that bypasses row-level security. ...
CLSA-2026-1789749920 TuxCare security update for js-yaml (1 CVE)
TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 4.3.0-tuxcare.1...
Exploit for CVE-2026-16265
CVE-2026-16265 — WP Maps This repository is intended as a tec...
CVE-2026-91142
Cockpit contains an integer overflow in the do_lastlog() function's offset calculation for lastlog entries, specifically on ILP32 (32-bit) builds. A low-privileged authenticated user with a specially provisioned large UID can cause the computed offset to wrap around, enabling unauthorized reads a...
EUVD-2026-83176
A flaw was found in Cockpit. An integer overflow vulnerability in the dolastlog function, specifically in the offset calculation for lastlog entries on ILP32 Integer, Long, Pointer 32-bit builds, can be exploited. A low-privileged authenticated user with a specially provisioned large User ID UID...
CVE-2026-91142 Cockpit: integer overflow in `do_lastlog()` offset calculation can misaddress `lastlog` entries on ilp32 builds
A flaw was found in Cockpit. An integer overflow vulnerability in the dolastlog function, specifically in the offset calculation for lastlog entries on ILP32 Integer, Long, Pointer 32-bit builds, can be exploited. A low-privileged authenticated user with a specially provisioned large User ID UID...