2057 matches found
WordPress TS Poll < 2.4.0 - SQL Injection
WordPress TS Poll plugin 2.4.0 contains a SQL injection caused by lack of sanitization and escaping of a parameter before using it in a SQL statement, letting attackers perform SQL injection attacks, exploit requires admin privileges. id: CVE-2024-8625 info: name: WordPress TS Poll 2.4.0 - SQL...
Malware in @ts-expect-error/n
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2026-57565 Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)
Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the apps/readest-app/src/pages/api/storage/upload.ts route constructed an object key from the authenticated user's identifier and a client-controlled...
@2060.io/credo-ts-didcomm-media-sharing (>=0.0.2, <=0.1.0), @2060.io/credo-ts-didcomm-reactions (>=0.0.2, <=0.1.0) +210 more potentially affected by CVE-2026-62374 via @sd-jwt/core (>=0.1.2-alpha.0, <=0.19.0)
@sd-jwt/core NPM version =0.1.2-alpha.0, =0.0.2, =0.0.2, =0.0.7, =0.0.12, =0.0.4, =0.0.0-alpha.117, =0.0.0-alpha.117, =0.0.0-alpha.119, =1.2.1-dev.3, =1.2.1-dev.3, =1.2.1-dev.3, =0.0.1-alpha.23, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-62374 Source advisory: GHSA-F9J6-8P6X-R9J6...
pyod
.. image:: https://raw.githubusercontent.com/yzhao062/pyod/master/brand/pyod-icon.svg :target: https://pyod.dev :alt: PyOD Ecosystem :width: 84px Python Outlier Detection PyOD 3 PyOD 3: Agentic Anomaly Detection At Scale |badgewebsite| |badgepypi| |badgeanaconda| |badgedocs| |badgestars|...
CVE-2026-40345
deepmerge-ts mergeleft.self, right.self - mergeleft.self, right.self - mergeleft.self, right.self...
CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ
InSAT MasterSCADA BUK-TS - Unauthenticated RCE CVE-2026-22553 | CVSS 9.8 Critical | Exploit Author Mohammed Idrees Banyamer 📝 Description InSAT MasterSCADA BUK-TS suffers from an Unauthenticated OS Command Injection vulnerability in the MMadmServ web interface. This flaw allows remote attackers t...
CVE-2026-12948
CVE-2026-12948 Vulnerability Summary A stored cross-site scripting XSS vulnerability was identified in the web management interface of the Digi PortServer TS 4 H MEI. A specially crafted, authenticated request allows a script payload to be permanently written to device configuration storage. The...
CLEANSTART-2026-CX09609 deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects
Security vulnerability affects the langfuse package. deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects...
CVE-2026-12352
CVE-2026-12352 Summary An unauthenticated, load-induced authentication bypass was identified in the Digi PortServer TS 4 H MEI, allowing retrieval of a local device configuration file without valid credentials. Under increased concurrent request load, the web server begins serving file contents...
BUK_TS_KILLER
BUKTSKILLER BUK-TS Exploit RCE Authentification Bypass - CVE-2026-12183: 1. write any password 2. intercept response 3. write "userid=" 4. successfully bypassed Public Exploit for BDU:2025-13914 and CVE-2026-3843...
[SECURITY] Fedora 45 Update: plasma-mobile-6.8.1-1.fc45
General UI components for Plasma Phone including shell, containment and apple ts...
Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in ip-address(CVE-2026-101910,CVE-2026-101913)
Summary IBM Db2 Developer Extension is affected by vulnerability in ip-addressCVE-2026-101910,CVE-2026-101913 Vulnerability Details CVEID:CVE-2026-101910 DESCRIPTION: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1, the Address6...
Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in ip-address(CVE-2026-101910, CVE-2026-101911, CVE-2026-101912, CVE-2026-101913)
Summary IBM Db2 Developer Extension is affected by vulnerability in ip-addressCVE-2026-101910, CVE-2026-101911, CVE-2026-101912, CVE-2026-101913 Vulnerability Details CVEID:CVE-2026-101910 DESCRIPTION: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Fro...
CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel (CENTOS7:CLSA-2026:1792797377)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792797377 advisory. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled...
CLSA-2026-1792767913 freerdp: Fix of CVE-2026-55193
CVE-2026-55193: fix heap buffer overflow in the TS Gateway RPC client; ensure remaining capacity in rpcchannelread and reject bindack fragment sizes above 0x0FF8...
CLSA-2026-1792768177 freerdp: Fix of CVE-2026-55193
CVE-2026-55193: fix heap buffer overflow in the TS Gateway RPC client; ensure remaining capacity in rpcchannelread and reject bindack fragment sizes above 0x0FF8...
GHSA-RXP7-6HXX-X8Q5 ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process
Summary new Address6 and Address6.isValid strip a zone identifier with the pattern /%.$/ before they apply the 45-character length limit. When the string holds many % characters followed by a line terminator, the pattern is retried from every % and each attempt scans to the line terminator before...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-142311)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142311 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled maxxmitfrag value in...