CVE-2026-102626

LimeSurvey Community Edition 7.4.0 is vulnerable to a Stored XSS flaw. An authenticated user with the global Surveys: create permission can inject a JavaScript-breaking value into the date_min attribute of a Date/Time question. Because the application fails to perform JavaScript-context encoding ...

CVE-2026-104846

The Seroval library (versions 0.12.0 through 1.6.2 ) is vulnerable to an unexpected code execution flaw during the fromJSON deserialization process. The root cause involves the deserialization of a fulfilled Promise control node, which can pass a plugin-produced callable-bearing thenable to a nat...

CVE-2026-104426 Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check

Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remainingtransactionvalue that clones the entire block-level spent-UTXO map per transaction during contextual verification. Attackers can mine or seed the mempool with roughly 26,000 minimal single-input transactio...

CVE-2026-104426 Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check

Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remainingtransactionvalue that clones the entire block-level spent-UTXO map per transaction during contextual verification. Attackers can mine or seed the mempool with roughly 26,000 minimal single-input transactio...

CVE-2026-94633

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91366

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-52824

CVE-2026-52824: Kimai デフォルト APPSECRET によるログインリンク偽造 フィールド| 値 ---|--- CVE| CVE-2026-52824 アドバイザリ| GHSA-jr9p-4h4j-6c58 重大度| Critical CWE| CWE-1188, 安全でないデフォルトによるリソースの初期化 影響を受けるバージョン| kimai/kimai = 2.57.0 修正バージョン| 2.58.0 アドバイザリ公開日| 2026-06-11 GitHub Advisory Database への追加日| 2026-07-14 報告者| AzureADTre...

CVE-2026-85016

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not escape an icon value before concatenating it into an HTML attribute in its shared widget-parameter processor, allowing users with Contributor access who do not hold unfilteredhtml to store a payload that executes when th...

EUVD-2026-91192

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not escape an icon value before concatenating it into an HTML attribute in its shared widget-parameter processor, allowing users with Contributor access who do not hold unfilteredhtml to store a payload that executes when th...

CVE-2020-23342

CVE-2020-23342 주의： 이 저장소를 로컬 가상 머신에서 docker로 실행할 때, config.py의 24번째 줄의 host 값을 가상 머신 IP로 수정해야 합니다...

Security Bulletin: Vulnerability in bcprov-jdk18on bundled with IBM Fusion and IBM Fusion HCI.

Summary IBM Fusion and IBM Fusion HCI include the bcprov-jdk18on library, which is affected by multiple vulnerabilities, including improper certificate validation, improper validation of integrity check value, and denial of service vulnerabilities. CVE-2026-12185, CVE-2026-12803, CVE-2026-12816,...

CVE-2023-51126

CVE-2023-51126 FLIR AX8 バージョン1.46.16以前は、/usr/www/res.phpを介したコマンドインジェクションに対して脆弱です。 VulnerabilityType Other コマンドインジェクション Vendor of Product FLIR Affected Component /usr/www/res.php内。パラメータvalueがコマンドを注入し、実行することができます。 Attack Type リモート Impact Code execution true Reference https://aux1.preditec.com/...

CVE-2026-102294 Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...

CVE-2026-24061

CVE-2026-24061 CVE-2026-24061 バッチスキャンツール 使用方法 options: -h, --help show this help message and exit -t, --target TARGET Target IP/CIDR or comma-separated list repeatable -f, --file FILE File with targets IP/CIDR, one per line or comma-separated -p, --port PORT Target ports, default 23...

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

Summarysoupsieve compiles CSS selector strings with a set of hand-written regular expressions. The shared IDENTIFIER sub-pattern also embedded in VALUE, and therefore in attribute selectors places two adjacent quantified groups over overlapping character classes: ?:classA|ESC+?:classB|ESC, where...

Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value

Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value SummaryCalendar events carry a free-form meta object that is stored exactly as submitted, with no validation of the values inside it. The scheduler reads the per-event alert offset out of that object i...

CVE-2026-19500-poc

CVE-2026-19500 Poc and writeup Description Sureforms is vulnerable to a DOS vulnerability , when attacker can submit unlimited key-value pair, leads to resource exhaustion and the administrator can not watch entries temporary. How to reproduce Submit the Form which is made by Sureforms plugin, an...

CVE-2023-51467

CVE-2023-51467 exp.py をコマンド実行に変更 Post.txt シリアル化脆弱性の悪用 bypassauth.txt 認証バイパスのテスト 脆弱性の原因 認証チェックで誤って null を使用して判定しているため、この方法は効果がなく、認証がバイパスされてしまいます。 if username == null username = String session.getAttribute"USERNAME"; if password == null password = String session.getAttribute"PASSWORD"; if token ==...

demo-cve-2022-21449

데모 프로젝트: CVE-2022-21449 취약점 이 프로젝트는 Java의 ECDSA 서명 검증에 영향을 미치는 CVE-2022-21449 취약점을 시연합니다. 이 취약점은 0 값r=0, s=0의 서명을 사용하여 악의적인 공격자가 서명 검증을 우회할 수 있게 합니다. 이 프로젝트는 보안 패치가 적용되지 않은 Java 17에서 EC 서명이 포함된 실제 및 가짜 JWT 토큰을 사용하여 이 문제를 보여줍니다. 기능 실제 JWT 토큰 : EC 개인 키로 서명된 유효한 JWT 토큰. 가짜 JWT 토큰 : 서명이 0으로 설정된 JWT...

CVE-2026-103678 Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format RTF data. Because the application fails to properly validate input buffer boundaries before copying data in getrtfdatafrombuf, reading beyond the...