CVE-2026-2445

CVE-2026-2445 involves a reflected cross-site scripting (XSS) flaw in multiple WSO2 products where user-supplied input in a URL parameter is rendered without proper sanitization/encoding. The underlying issue is unsafe handling of URL parameters that can inject malicious JavaScript, enabling brow...

CVE-2026-2445 Reflected Cross-Site Scripting via URL Parameter in Multiple WSO2 Products Enables UI Redirection and Modification

The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition allows for the injection of malicious JavaScript payloads. An attacker can leverage this vulnerability to cause the...

Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation

A flaw was found in Apache HTTP Server. This escalation of privilege vulnerability allows local attackers, specifically those with the ability to author .htaccess files, to read sensitive files. This flaw enables unauthorized access to files with the privileges of the httpd user, potentially...

CVE-2026-51027

An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component...

PT-2026-61620

Name of the Vulnerable Software and Affected Versions FileThingie version 2.5.7 Description A remote attacker can obtain sensitive information through the 'ft2.php' component. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2026-62024

It was discovered that FreeType incorrectly handled certain variable font files. An attacker could possibly use this issue to cause FreeType to crash, resulting in a denial of service, or obtain sensitive information...

CVE-2026-51031

FlareSolverr before version 3.4.7 contains a server-side request forgery SSRF vulnerability in the /v1 API endpoint. This allows a remote attacker to obtain sensitive information...

TencentOS Server 3: python-urllib3 (TSSA-2026:0624)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0624 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EUVD-2026-45990

Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request...

CVE-2026-51026

Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request...

PT-2026-61551

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 3.2.0 Description Custom API routes fail to validate namespace and database scope, which allows authenticated users to invoke endpoints across different namespaces or databases. An attacker with valid credentials fo...

Windows Cloud Files Mini Filter Disclosure

The vulnerability of the Windows Cloud Files Mini Filter driver in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

USB Audio Class driver Disclosure

The vulnerability of the USB Audio Class driver for Windows operating systems is related to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

ROS-20260720-73-0017

The vulnerability of the Accessibility component in Google Chrome browser relates to memory overflow outside the bounds of the program. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through a specially created web page...

PT-2026-61619

Name of the Vulnerable Software and Affected Versions FileThingie version 2.5.7 Description A directory traversal issue allows a remote attacker to obtain sensitive information by sending a crafted request. Directory traversal is a flaw that allows an attacker to access files and directories stor...

ROS-20260720-73-0012

The vulnerability of Google Chrome’s browser extensions is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information that is protected by these extensions...

Cisco ASA/FTD WebVPN/AnyConnect Improper Input Validation (CVE-2020-3452)

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system. The vulnerability i...

Mozilla Firefox WebAssembly Disclosure

JavaScript component vulnerability: Mozilla Firefox’s WebAssembly browser is vulnerable due to an incorrect pointer dereferencing. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...

PT-2026-62023

It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code...

CVE-2026-51026

CVE-2026-51026 affects FileThingie v2.5.7 with a directory traversal vulnerability that allows a remote attacker to obtain sensitive information via a crafted request. CVSSv3.1 metrics show AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (base score 6.5, MEDIUM). No remediation details are provided in the su...