CVE-2026-121949

The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes not permitted by allowMediaSchemes or allowMediaHosts to bypass it, so that browsers load images from disallowed hosts in Symfony versio...

Exploit for Missing Authentication for Critical Function in Oracle Mysql_Connector\/J

CVE-2026-60623 — Reproducer Vulnerability: MySQL Connecto...

GHSA-3GQ2-X4QG-P4G6 LXD: SSRF via image import from URL allows internal network probing by authenticated users

Summary The LXD image import-from-URL endpoint POST /1.0/images with source.type=url makes server-side HTTP requests to an attacker-supplied URL without any private-IP or loopback blocking. An authenticated user with the cancreateimages entitlement can force the LXD daemon to connect to internal...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Oracle Mysql_Connector\/J

CVE-2026-61082 — Reproducer Vulnerability: MySQL Connecto...

sandcat

Sandcat Browser Sandcat is a lightweight multi-tabbed web browser that combines the speed and power of Chromium and Lua. Sandcat comes with built-in live headers, an extensible user interface and command line console, resource viewer, and many other features that are useful for web developers and...

Exploit for CVE-2026-101678

CVE-2026-101678 — Reproducer Vulnerability: MySQL Connect...

CVE-2026-123824

The Symfony Config component XmlUtils::parse enables DTD validation before rejecting documents that carry a doctype, allowing XML external entity XXE injection in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. A remote attacker who can supply...

CVE-2026-123748

A security flaw has been discovered in chenyme grok2api up to 3.1.6. Affected by this vulnerability is the function proxyVoiceWebSocket of the file backend/internal/transport/http/inference/voicewshandler.go of the component WebSocket Proxy. The manipulation results in resource consumption. The...

GHSA-92R3-P8C2-3FPX Eclipse hawkBit DDI has Privilege Escalation that allows Tenant-Isolated Firmware Exfiltration

Description A privilege escalation vulnerability has been identified in the Direct Device Integration DDI Controller of Eclipse hawkBit versions 1.0.3 and prior. This vulnerability allows an authenticated device to escalate its permissions and bypass the strict boundaries of its assigned updates...

K000164129: CPython vulnerability CVE-2025-8194

Security Advisory Description There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of...

CVE-2026-123824 Symfony: XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = true

The Symfony Config component XmlUtils::parse enables DTD validation before rejecting documents that carry a doctype, allowing XML external entity XXE injection in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. A remote attacker who can supply...

EUVD-2026-118384

The Symfony Config component XmlUtils::parse enables DTD validation before rejecting documents that carry a doctype, allowing XML external entity XXE injection in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. A remote attacker who can supply...

CVE-2026-122053

The Symfony Serializer component ObjectNormalizer treats any attribute name containing . and, from Symfony 6.4, as a writable property path, allowing untrusted input to modify properties of nested objects and bypass their Ignore metadata attribute in Symfony versions 5.4.41 prior to 5.4.56, 6.4.9...

CVE-2026-118515

The Symfony Serializer component DataUriNormalizer handles only the exact types SplFileInfo, SplFileObject, and File, so for a property typed with a subclass such as UploadedFile, ObjectNormalizer instantiates the object through its constructor from attacker-controlled data, including the file...

CVE-2026-106136

Cross-Site Scripting XSS in the Chat component @progress/kendo-react-conversational-ui in Progress Software KendoReact versions 0.6.0 through 16.1.0 allows a low-privileged attacker who can supply Chat messages to execute arbitrary JavaScript in the origin of the application via an unsafe URL in ...

CVE-2026-106143

Cross-Site Scripting XSS in the Editor component @progress/kendo-vue-editor in Progress Software Kendo UI for Vue versions 2.7.1 through 10.0.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user's browser via an unsafe URL entered in the...

CVE-2026-106144

Prototype Pollution in the Scheduler component @progress/kendo-angular-scheduler and @progress/kendo-angular-common in Progress Software Kendo UI for Angular versions prior to 25.1.0 allows a high-privileged attacker who can control a field path processed by the Scheduler to modify the prototype ...

CVE-2026-106141

Cross-Site Scripting XSS in the Editor component @progress/kendo-angular-editor in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user's browser via a link or image with an...

CVE-2026-106142

Cross-Site Scripting XSS in the Editor component @progress/kendo-react-editor in Progress Software KendoReact versions 2.7.0 through 16.1.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user's browser via a link with an unsafe URL in the...

CVE-2026-106134

Cross-Site Scripting XSS in the Menu component @progress/kendo-react-layout in Progress Software KendoReact versions 1.3.0 through 16.1.0 allows a low-privileged attacker who can influence the Menu item data to execute arbitrary JavaScript in the origin of the application via an unsafe URL in a...