CVE-2026-94038

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx of the component Deno Backend. Such manipulation of the argument supabaseurl leads to server-side request forgery. The attack can be executed remotely. The...

CVE-2026-94037

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of the component analyzecsvdata MCP tool. This manipulation of the argument filename causes path traversal. Remote...

CVE-2026-94039

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /apps/invoices/actions.ts of the component Invoice PDF Renderer. Performing a manipulation of the argument businessLogo results in server-side request forgery. The attack is possib...

CVE-2026-94039 vas3k TaxHacker Invoice PDF Renderer actions.ts generateInvoicePDF server-side request forgery

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /apps/invoices/actions.ts of the component Invoice PDF Renderer. Performing a manipulation of the argument businessLogo results in server-side request forgery. The attack is possib...

EUVD-2026-83758

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /apps/invoices/actions.ts of the component Invoice PDF Renderer. Performing a manipulation of the argument businessLogo results in server-side request forgery. The attack is possib...

CVE-2026-94039 vas3k TaxHacker Invoice PDF Renderer actions.ts generateInvoicePDF server-side request forgery

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /apps/invoices/actions.ts of the component Invoice PDF Renderer. Performing a manipulation of the argument businessLogo results in server-side request forgery. The attack is possib...

CVE-2026-94039

vas3k TaxHacker (versions up to 0.8.5 ) is affected by a server-side request forgery (SSRF) vulnerability in the Invoice PDF Renderer component. The root cause is an unvalidated businessLogo argument in the generateInvoicePDF function located at /apps/invoices/actions.ts, which allows a remote at...

CVE-2026-94039 vas3k TaxHacker Invoice PDF Renderer actions.ts generateInvoicePDF server-side request forgery

A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /apps/invoices/actions.ts of the component Invoice PDF Renderer. Performing a manipulation of the argument businessLogo results in server-side request forgery. The attack is possib...

EUVD-2026-83754

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx of the component Deno Backend. Such manipulation of the argument supabaseurl leads to server-side request forgery. The attack can be executed remotely. The...

CVE-2026-94038 NonceGeek dim-sum-app Deno Backend main.tsx textSearchV2Handler server-side request forgery

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx of the component Deno Backend. Such manipulation of the argument supabaseurl leads to server-side request forgery. The attack can be executed remotely. The...

CVE-2026-94038 NonceGeek dim-sum-app Deno Backend main.tsx textSearchV2Handler server-side request forgery

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx of the component Deno Backend. Such manipulation of the argument supabaseurl leads to server-side request forgery. The attack can be executed remotely. The...

CVE-2026-94038

NonceGeek dim-sum-app is vulnerable to server-side request forgery (SSRF) in the Deno Backend component, specifically in the textSearchV2Handler function within deno/main.tsx. The root cause is unsanitized manipulation of the supabase_url argument, allowing a remote, unauthenticated attacker to f...

CVE-2026-94036

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

EUVD-2026-83753

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of the component analyzecsvdata MCP tool. This manipulation of the argument filename causes path traversal. Remote...

CVE-2026-94037 00Kisumi00 mcp-file-analyzer analyze_csv_data MCP tool main.py ControlFlowNode path traversal

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of the component analyzecsvdata MCP tool. This manipulation of the argument filename causes path traversal. Remote...

CVE-2026-94037

CVE-2026-94037 affects the mcp-file-analyzer project (by 00Kisumi00) up to commit 84740852 . The vulnerability is a path traversal in the ControlFlowNode function within main.py , part of the analyze_csv_data MCP tool. An attacker can manipulate the filename argument to traverse beyond the intend...

CVE-2026-94037 00Kisumi00 mcp-file-analyzer analyze_csv_data MCP tool main.py ControlFlowNode path traversal

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of the component analyzecsvdata MCP tool. This manipulation of the argument filename causes path traversal. Remote...

CVE-2026-94036

D-Link DIR-X1860 and DIR-X1860Z routers (up to version 1.0.2.220120.165402) are affected by an improper access control flaw in the /ubus file of the routerd component. Manipulation of the passwd_set argument allows an attacker on the local network to bypass access controls, with no authentication...

CVE-2026-94036 D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

EUVD-2026-83752

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...