CVE-2026-34977: Improper Neutralization of Special Elements used in an OS Command

Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, when uploading a JPEG, a user can specify an optional password to accompany the JPEG. This password is then directly passed into an expect command, which is then subsequently passed into a bash -c command,...

CVE-2025-64485 CVAT: Mounted share file overwrite via crafted request

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...

The vulnerability of Google Chrome allows a perpetrator to bypass the CSP security mechanism.

The vulnerability of the ServiceWorkerContainer::registerServiceWorkerImpl function WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in the Google Chrome browser’s Blink component is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor...