CVE-2026-111494

Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker capable of intercepting the victim's traffic could read and modify...

CVE-2026-111494

The MatchPoint Android app by TPC Software is vulnerable to incorrect validation of TLS certificates . The root cause is a TrustManager that accepts any certificate combined with a permissive hostname validator. Furthermore, the application permits unencrypted HTTP traffic . These flaws allow an ...

CVE-2026-111768

The Model Context Protocol TypeScript SDK is vulnerable to a memory exhaustion issue where a single HTTP request within the default 4 MiB limit can terminate the process due to JavaScript heap exhaustion . The root cause is the lack of enforced limits on the number of array elements and object ke...

CVE-2026-111768 Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP servers did not enforce a limit on the number of arr...

chromium-browser: angle: chromium-browser: Improper input validation in ANGLE

An improper input validation flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=536450979...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page

A flaw was found in ANGLE, a graphics engine used in Google Chrome. This vulnerability, caused by improper validation of an array index, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation can occur when a user visits a specially crafted HTML...

CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Unauthenticated Arbitrary File Upload Description: The Woocommerce Product Design plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possibl...

CVE-2024-21534-poc

Vulnerability: CVE-2024-21534 Severity: Critical CVSS Score: 9.8 Description: The jsonpath-plus package versions = 10.0.7 is vulnerable to a Remote Code Execution RCE vulnerability that allows attackers to execute arbitrary code via Node.js's VM module. This vulnerability is caused by insufficien...

CVE-2026-46350 dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS

dcmjs is a JavaScript implementation of DICOM manipulation. Prior to 0.52.0, the DecimalString and IntegerString implementations in src/ValueRepresentation.js sanitize text with a permissive regular expression and pass the result to JavaScript's Number constructor without validating finiteness or...

CVE-2026-46350

The dcmjs JavaScript library (versions

CVE-2026-104135

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, library/ajax/paymentajax.php validates a CSRF token but performs no AclMain authorization check before executing a wildcard search of patientdata. Any authenticated user,...

CVE-2026-102476

A flaw was found in Eclipse Vert.x. This vulnerability can lead to information disclosure because the HTTP client improperly caches Secure Sockets Layer SSL contexts. When requesting a secure connection, a client may inadvertently reuse a cached context configured with weaker security properties,...

CVE-2026-116593

A flaw was found in Apache Kafka Connect. This vulnerability allows information disclosure when a remote attacker accesses the connector configuration validation endpoint. By submitting a request to this endpoint, an attacker can force installed configuration providers to resolve and return...

CVE-2026-112778

A flaw was found in Traefik. An authenticated attacker with permissions to create or update Kubernetes Ingress or Service resources can bypass multi-tenant isolation boundaries due to missing namespace validation in resource annotations. By referencing configuration objects in other namespaces, t...

CVE-2026-121392

A flaw was found in FreeRDP. A man-in-the-middle attacker possessing a certificate issued by a trusted Certificate Authority CA can exploit improper certificate identity validation during connection establishment. Because the client incorrectly accepts fallback certificate names and improperly...

GitPython: GitPython: arbitrary code execution via improper submodule path validation

A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution by supplying an untrusted submodule path. Because the library fails to properly validate destination paths before cloning repository data, an attacker can plant a malicious executable script...

GitPython: GitPython: arbitrary code execution via improper submodule path validation

A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution by supplying an untrusted submodule path. Because the library fails to properly validate destination paths before cloning repository data, an attacker can plant a malicious executable script...

GitPython: GitPython: arbitrary code execution via improper submodule path validation

A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution by supplying an untrusted submodule path. Because the library fails to properly validate destination paths before cloning repository data, an attacker can plant a malicious executable script...

CVE-2026-116789 FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, dtlsstatesetup compared a peer certificate with the SDP a=fingerprint only when FreeSWITCH was th...

CVE-2026-116789

In versions prior to 1.11.2 , FreeSWITCH is vulnerable to a flaw where the dtls_state_setup() function fails to bind the peer certificate to the SDP a=fingerprint when acting as a DTLS server . An unauthenticated peer reaching the negotiated media port can complete the DTLS-SRTP handshake using a...