CVE-2026-21078

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

CVE-2026-8646: Inconsistent Interpretation of HTTP Requests

IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker could smuggle a specially crafted request to the application server thereby allowing the attacker to bypass security...

CVE-2026-41299

OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the chat.send gateway method where ACP-only provenance fields are gated by self-declared client metadata from WebSocket handshake rather than verified authorization state. Authenticated operator clients can spoof ACP...

EUVD-2006-2531

Malware in sbrugna...

EUVD-2025-17798

Malicious code in bioql PyPI...

CVE-2024-50568

CVE-2024-50568 affects Fortinet FortiOS and FortiProxy: a non-endpoint channel vulnerability (CWE-300) allows an unauthenticated attacker with device-specific data to spoof the identity of a downstream device in the security fabric via crafted TCP requests. Affected versions include FortiOS 7.0.0...

Sql injection

SQL Injection vulnerability in User Stats interface /vicidial/userstats.php of VICIdial via the filedownload parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data or make it otherwise unavailable, and beco...