1273 matches found
Parallels H-Sphere 3.0.0 P9/3.1 P1 - Cross-Site Scripting
Parallels H-Sphere 3.0.0 P9 and 3.1 P1 contains multiple cross-site scripting vulnerabilities in login.php in webshell4. An attacker can inject arbitrary web script or HTML via the err, errorcode, and login parameters, thus allowing theft of cookie-based authentication credentials and launch of...
EUVD-2026-92422
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25...
CVE-2025-32463
CVE-2025-32463 Marco de Detección Un marco integral de monitoreo de seguridad y detección diseñado para identificar intentos de explotación de la vulnerabilidad de escalada de privilegios sudo chroot CVE-2025-32463. Este proyecto demuestra metodologías avanzadas de detección de amenazas,...
EUVD-2026-92290
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Retrieve Embedded Sensitive Data.This issue affects Memberful - Membership Plugin: from n/a through 1.81.2...
CVE-2026-4255
CVE-2026-4255 Thermalright TR-VISION HOME Elevación de Privilegios mediante Carga Lateral de DLL Severidad: ALTA CVSS 8.4 CWE: CWE-829 Inclusion of Functionality from Untrusted Control Sphere Publicado: 16/03/2026 CNA: Toreon Versiones afectadas: Thermalright TR-VISION HOME ≤ 2.0.5 Windows 64-bit...
Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()
Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...
CVE-2021-43129
CVE-2021-43129 Vulnerabilidad en el Sistema de Gestión de Aprendizaje LMS de D2L Brightspace Tipo de vulnerabilidad: CWE-668: Exposición de un recurso a una esfera incorrecta Proveedor del producto: Desire2Learn/D2L Base de código del producto afectado: Sistema de Gestión de Aprendizaje LMS de D2...
baserCMS plugin "BcAddonMigrator" vulnerable to inclusion of functionality from untrusted control sphere
Overview baserCMS plugin "BcAddonMigrator" provided by baserCMS Users Community contains the following vulnerability. Inclusion of Functionality from Untrusted Control Sphere CWE-829 - CVE-2026-97150 Kuniyoshi Noguchi KuniNogu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability t...
EUVD-2026-84960
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...
CVE-2026-17647
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...
CVE-2026-17647 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...
CVE-2026-17647 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...
CVE-2026-17647
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by vulnerabilities that could allow a local attacker to execute arbitrary commands . This issue stems from the inclusion of functionality originating from an untrusted control sphere . The vulnerability is assigned a CVSS 3....
CVE-2026-17647: Inclusion of Functionality from Untrusted Control Sphere
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...
CVE-2026-81305 CareCam CM2507 Inclusion of Functionality from Untrusted Control Sphere
CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device...
CVE-2026-81305 CareCam CM2507 Inclusion of Functionality from Untrusted Control Sphere
CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device...
Astra Linux – Vulnerability in SOX
There is a heap-based buffer overflow vulnerability in the sphere.c startread function of the Sound Exchange libsox 14.4.2 version and the main commit 42b3557e. A specially crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to exploit this vulnerability...
Astra Linux – Vulnerability in gpac
A vulnerability in GPAC version 2.2.1 and earlier allows a local attacker to cause a denial of service through the QDecCoordOnUnitSphere function in the file src/bifs/unquantize.c...
EUVD-2026-76443
Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the...