PDFMathTranslate server-side request forgeing vulnerability

PDFMathTranslate versions 1.9.11 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from the translatefile processor, which passes user URLs from the Link input directly to downloadwithlimit without verifying the protocol or address. This makes it vulnerable t...

Helicone server request forgery vulnerability

Helicone v2025.08.21-1 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from the Jawn webhook sender’s server-side request forgeing feature, which allows authenticated organizational users to access internal services by accessing hostnames that poin...

CVE-2026-85531

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1...

com.savoirtech.aetos:aetos (>=4.2.0.1, <=4.3.1), com.treelogic-swe:aws-mock (1.0) +141 more potentially affected by CVE-2026-97468 via org.apache.cxf.services.sts:cxf-services-sts-core (>=2.5.0, <=3.6.12)

org.apache.cxf.services.sts:cxf-services-sts-core MAVEN version =2.5.0, =4.2.0.1, =ec2-2013-02-01, =7.2.0, =6.3.0, =1.2.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.7, =1.0.7, =1.0.0, =1.0.2 and more Source cves: CVE-2026-97468 Source advisory: MEND:CVE-2026-97468...

io.quarkiverse.cxf:quarkus-cxf-integration-test-ws-trust (>=3.35.0, <=4.0.0.beta1), io.quarkiverse.cxf:quarkus-cxf-services-sts (>=3.35.0, <=4.0.0.beta1) +8 more potentially affected by CVE-2026-97468 via org.apache.cxf.services.sts:cxf-services-sts-core (>=4.2.0, <=4.2.3)

org.apache.cxf.services.sts:cxf-services-sts-core MAVEN version =4.2.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-97468 Source advisory: MEND:CVE-2026-97468...

io.quarkiverse.cxf:quarkus-cxf-integration-test-ws-trust (>=2.0.0.alpha1, <=3.33.14), io.quarkiverse.cxf:quarkus-cxf-services-sts (>=2.0.0.alpha1, <=3.33.14) +20 more potentially affected by CVE-2026-97468 via org.apache.cxf.services.sts:cxf-services-sts-core (>=4.0.0, <=4.1.8)

org.apache.cxf.services.sts:cxf-services-sts-core MAVEN version =4.0.0, =2.0.0.alpha1, =2.0.0.alpha1, =2.0.0.alpha1, =3.0.0-m1, =3.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =7.3.7.final, =7.0.0.final, =6.2.0.final, =8.0.0.beta1 and more Source cves: CVE-2026-97468 Source advisory...

CVE-2026-107935

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...

DEBIAN-CVE-2026-107935

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...

UBUNTU-CVE-2026-107935

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...

CVE-2026-107935

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...

CVE-2026-84224

The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing users with editor-level access and above to make the site issue requests to internal services that are not otherwise reachable, and to tell which of those are live from the respons...

CVE-2026-107935

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...

CVE-2026-107935

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...

CVE-2026-107935

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...

CVE-2026-84224 Kirki < 6.3.2 - Editor+ Blind SSRF via Remote Template URL

The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing users with editor-level access and above to make the site issue requests to internal services that are not otherwise reachable, and to tell which of those are live from the respons...

EUVD-2026-95577

The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing users with editor-level access and above to make the site issue requests to internal services that are not otherwise reachable, and to tell which of those are live from the respons...

CVE-2026-107935: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...

Windows Management Services Privilege Escalation

The vulnerability of the Windows Management Services management tool in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

CVE-2026-84224: Server-Side Request Forgery (SSRF)

The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing users with editor-level access and above to make the site issue requests to internal services that are not otherwise reachable, and to tell which of those are live from the respons...

PT-2026-108794

Name of the Vulnerable Software and Affected Versions gvproxy affected versions not specified Description A path traversal issue exists in gvproxy, the network forwarder within the gvisor-tap-vsock package. The unauthenticated endpoint '/services/forwarder/expose' fails to validate the socket pat...