DivvyDrive 安全漏洞

DivvyDrive is a file storage and sharing management platform developed by DivvyDrive Inc. in Turkey. Versions of DivvyDrive from 4.8.2.9 to 4.8.3.2 contained security vulnerabilities. These vulnerabilities were caused by improper use of HTML tags related to scripts in web pages, which could lead ...

WordPress plugin BetterDocs Pro SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-41509

Name of the Vulnerable Software and Affected Versions OpenSearch versions 2.18.0 through 2.19.3 OpenSearch versions 3.0.0 through 3.2.x Description A regression caused the plugins.security.ssl.transport.enforce hostname verification setting to be ineffective. When enabled, the system failed to...

OpenEXR 缓冲区错误漏洞

OpenEXR is an open standard for high dynamic range image HDR file format, open-sourced by the Academy Software Foundation. Versions of OpenEXR from 3.0.0 to 3.2.9, 3.3.0 to 3.3.11, and 3.4.0 to 3.4.11 contain a buffer error vulnerability. This vulnerability arises from the IDManifest::init...

FreeScout 安全漏洞

FreeScout is a lightweight and powerful free open-source help desk and shared inbox built using PHP Laravel framework by FreeScout Inc. Versions of FreeScout prior to 1.8.214 contained security vulnerabilities. These vulnerabilities stemmed from the conversationchangecustomer operation, which...

CI4MS 代码问题漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS from 0.26.0.0 to 0.31.7.0 had code-related vulnerabilities. These vulnerabilities stemmed from the theme upload feature not filtering PHP files within ZIP files. This could allow authenticated users to execute...

CVE-2026-37709

Insecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-03-10 commit 676a9958 allows a remote attacker to execute arbitrary code via the app/Http/Controllers/Api/UploadedFilesController.php component...

CI4MS 代码问题漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. There were code issues and vulnerabilities in versions of CI4MS from 0.26.0 to 0.31.8.0. These vulnerabilities stemmed from the auth filter disabling the check for banning/banned users...

VMware Spring Cloud Config 安全漏洞

VMware Spring Cloud Config is a configuration management solution for distributed systems developed by VMware, Inc. This product provides server and client support for external configurations in distributed systems. There is a security vulnerability in VMware Spring Cloud Config, which stems from...

Ghost CMS 6.19.0 - SQLi

Exploit Title: Ghost CMS 6.19.0 - SQLi Date: 2026-03-30 Exploit Author: Maksim Rogov Exploit Licence: GPL-3.0 Software Link: https://ghost.org/ Version: Ghost =3D 3.24.0, = 3.24.0, = 6.19.0 Tested on: Ghost 6.16.1 CVE : CVE-2026-26980 !/usr/bin/env python3 import requests import re import sys...

Tp-Link Archer AX53 v1.0 Openvpn configuration restore client_disconnect OS command injection vulnerability

Talos Vulnerability Report TALOS-2025-2307 Tp-Link Archer AX53 v1.0 Openvpn configuration restore clientdisconnect OS command injection vulnerability May 7, 2026 CVE Number CVE-2026-30815 SUMMARY An os command injection vulnerability exists in the Openvpn configuration restore clientdisconnect...

Sidekiq-cron is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL

Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting xss vulnerability via crafted URL being rended from cron.erb...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @agentforce/adk (>=0.9.0, <=0.12.1) +585 more potentially affected by CVE-2026-44455 via hono (>=4.0.0, <=4.12.15)

hono NPM version =4.0.0, =0.3.1, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =0.0.1, =0.0.16 and more Source cves: CVE-2026-44455 Source advisory: OSV:GHSA-69XW-7HCM-H432...

EUVD-2026-2735

Keras vulnerable to DoS via Malicious .keras Model HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor...

@augu/fastify-nitro (>=1.0.0, <=1.2.0), @bicou/countries-server (>=1.5.0, <=1.6.7) +27 more potentially affected by CVE-2026-44372 via nitropack (>=2.1.0, <=2.13.1)

nitropack NPM version =2.1.0, =1.0.0, =1.5.0, =0.4.4, =0.6.1, =1.0.0, =1.0.0, =5.0.0-rc.212, =5.0.0-rc.212, =3.0.0, =4.0.0-alpha.1, =4.0.0-29145487.7beaa672, =7.40.3, =0.0.0-beta.0, =2.6.0, =2.10.1 and more Source cves: CVE-2026-44372 Source advisory: SNYK:JS-NITROPACK-16757946...

@100x/application (>=0.0.1, <=0.0.6), @aero-js/cli (0.4.0) +78 more potentially affected by CVE-2026-44372 via nitro (>=3.0.0, <=3.0.260415-beta)

nitro NPM version =3.0.0, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =0.2.9, =2.4.0-alpha.2, =3.0.0-alpha.55 and more Source cves: CVE-2026-44372 Source advisory: OSV:GHSA-9PHM-9P8F-HW5M...

@augu/fastify-nitro (>=1.0.0, <=1.2.0), @bicou/countries-server (>=1.5.0, <=1.6.7) +27 more potentially affected by CVE-2026-44372 via nitropack (>=2.1.0, <=2.13.1)

nitropack NPM version =2.1.0, =1.0.0, =1.5.0, =0.4.4, =0.6.1, =1.0.0, =1.0.0, =5.0.0-rc.212, =5.0.0-rc.212, =3.0.0, =4.0.0-alpha.1, =4.0.0-29145487.7beaa672, =7.40.3, =0.0.0-beta.0, =2.6.0, =2.10.1 and more Source cves: CVE-2026-44372 Source advisory: OSV:GHSA-9PHM-9P8F-HW5M...

@augu/fastify-nitro (>=1.0.0, <=1.2.0), @bicou/countries-server (>=1.5.0, <=1.6.7) +27 more potentially affected by CVE-2026-44373 via nitropack (>=2.1.0, <=2.13.1)

nitropack NPM version =2.1.0, =1.0.0, =1.5.0, =0.4.4, =0.6.1, =1.0.0, =1.0.0, =5.0.0-rc.212, =5.0.0-rc.212, =3.0.0, =4.0.0-alpha.1, =4.0.0-29145487.7beaa672, =7.40.3, =0.0.0-beta.0, =2.6.0, =2.10.1 and more Source cves: CVE-2026-44373 Source advisory: OSV:GHSA-5W89-W975-HF9Q...

@augu/fastify-nitro (>=1.0.0, <=1.2.0), @bicou/countries-server (>=1.5.0, <=1.6.7) +27 more potentially affected by CVE-2026-44373 via nitropack (>=2.1.0, <=2.13.1)

nitropack NPM version =2.1.0, =1.0.0, =1.5.0, =0.4.4, =0.6.1, =1.0.0, =1.0.0, =5.0.0-rc.212, =5.0.0-rc.212, =3.0.0, =4.0.0-alpha.1, =4.0.0-29145487.7beaa672, =7.40.3, =0.0.0-beta.0, =2.6.0, =2.10.1 and more Source cves: CVE-2026-44373 Source advisory: SNYK:JS-NITROPACK-16757953...

@100x/application (>=0.0.1, <=0.0.6), @aero-js/cli (0.4.0) +78 more potentially affected by CVE-2026-44373 via nitro (>=3.0.0, <=3.0.260415-beta)

nitro NPM version =3.0.0, =0.0.1, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.1.0, =0.1.0, =0.4.2, =0.2.9, =2.4.0-alpha.2, =3.0.0-alpha.55 and more Source cves: CVE-2026-44373 Source advisory: SNYK:JS-NITRO-16757954...