280 matches found
CVE-2026-600004
A Remote Code Execution (RCE) vulnerability exists in Gitea versions ≥ 1.17 and 2.32 on the server. The flaw resides in the diffpatch API endpoint, where an attacker can abuse the 3-way apply (fallback -3) mechanism to install and execute a malicious Git hook from attacker-controlled content. Suc...
CVE-2026-57836
The confluent-kafka Python client (versions 2.8.0 through 2.14.2 ) contains a high-severity vulnerability (CVSS 3.1 7.4 ) due to improper certificate validation (CWE-295). The HcVaultKmsClient component hardcodes verify=False when initializing the hvac.Client for HashiCorp Vault KMS integration w...
CVE-2026-65320
The fastcore library (versions <= 2.2.30 ) is vulnerable to a Path Traversal (Tar Slip) vulnerability in the untar_dir() function. The root cause is that untar_dir() calls _unpack(), which forwards the archive to shutil.unpack_archive(). On Python versions
CVE-2019-19511
The Chevereto content management system is vulnerable to Remote Code Execution (RCE) in versions 1.0.0 Free through 1.1.4 Free and up to 3.13.4 Core . The root cause is located in the installer.php file, which allows authenticated administrators to inject arbitrary PHP code into the installation ...
CVE-2026-94545
A critical SVG injection vulnerability exists in Next.js (versions >=16.2.0
CVE-2026-93674
CVE-2026-93674 is an authenticated blind command injection vulnerability for which a proof-of-concept exploit has been publicly released. The POC is a Python script (available at https://github.com/rmhowe425/POC-CVE-2026-93674) that accepts parameters for URL, username, password, and command to e...
CVE-2026-93680
CVE-2026-93680 affects the MCP (Model Context Protocol) ecosystem, specifically the SSE connection and session initialization functionality, as indicated by a published proof-of-concept exploit. A PoC is available on GitHub , with usage involving connecting to an MCP SSE endpoint and initializing...
CVE-2026-88533
CVE-2026-88533 is a CWE-22 Path Traversal in QAnything (netease-youdao), an open-source RAG platform, affecting v1.4.x through v2.0.0 (branch qanything-v2). The POST /api/local_doc_qa/upload_files endpoint uses the attacker-controlled multipart filename as the destination path without sanitizing ...
CVE-2026-61797
CVE-2026-61797 is a time-based blind SQL injection in the GLPI PDF Plugin (tested version 4.1.2 , fixed in 4.1.3 ). The vulnerability exists in /marketplace/pdf/front/preference.form.php, where attacker-controlled array keys from the item POST parameter are concatenated directly into a MySQL INSE...
CVE-2026-65615
CVE-2026-65615 is the final step (Step 5) in a pre-authenticated RCE attack chain targeting JFrog Artifactory 7.146.x (Docker deployment with external PostgreSQL). The vulnerability exploits Logback fileHeader to write a malicious web.xml CGI component, enabling Tomcat CGI pre-authenticated RCE ....
CVE-2026-78804
CVE-2026-78804 is an authenticated time-based blind SQL injection in Dolibarr ERP, affecting the product stock management functionality. The seuil_stock_alerte parameter in /product/stock/product.php is inserted into an SQL statement via direct string concatenation in an unquoted numeric context ...
CVE-2026-2035703
CVE-2026-2035703 is a critical OS command injection (CWE-78, CVSS 9.8) in the Tozed ZLT X300/X300A 5G CPE Router (firmware 6.01.3, all versions believed affected). The TR-069/CWMP client daemon (netcwmpd) passes the IPPingDiagnostics Host parameter unsanitized into sprintf, constructing a shell c...
CVE-2026-11991
CVE-2026-11991 is an authorization bypass (CWE-639) in the FlowForms WordPress Conversational Form Builder plugin, affecting versions up to 1.1.1 . The REST API publish endpoint (/flowforms/v1/forms/{id}/publish) checks only the generic edit_posts capability—held by the Contributor role—without v...
CVE-2021-38817
The description for CVE-2021-38817 is a reserved placeholder with no publicly available technical details about affected products, root cause, or impact. No connected documents provide additional information. Monitor for updates.
CVE-2024-57552
CVE-2024-57552 affects the Online Food Ordering System v2.0 and is classified as a Stored Cross-Site Scripting (XSS) vulnerability, according to the advisory published by researcher Aman Bahiniya . The CVE was assigned by MITRE in December 2024 but remained in reserved status and was never formal...
CVE-2024-57551
CVE-2024-57551 affects the Online Food Ordering System v2.0 , where an arbitrary file upload flaw allows an attacker to achieve Remote Code Execution (RCE) . The CVE was reserved by MITRE in December 2024 but never officially published, meaning it remained unindexed in NVD. Researcher Aman Bahini...
CVE-2024-57553
CVE-2024-57553 affects the Online Flight Booking Management System v1.0 and involves an HTML Injection vulnerability. The CVE was reserved in December 2024 but never officially published by MITRE; a researcher (Aman Bahiniya) published the advisory independently via a GitHub repository. No specif...
CVE-2026-59346
CVE-2026-59346 is an integer-overflow vulnerability in the VMXNET3 virtual network adapter of VMware Workstation and VMware Fusion (versions 25H2 and 26H1). Per advisory VMSA-2026-0007, a malicious actor with local administrative privileges on a guest VM can exploit this flaw to execute code on t...
CVE-2025-52399
CVE-2025-52399 is a SQL Injection vulnerability in the Institute-of-Current-Students PHP application (version 1.0). The /loginlinkfaculty endpoint fails to sanitize the fid POST parameter before including it in a SQL query, enabling remote attackers to execute arbitrary SQL commands. Exploitation...