CVE-2026-103766

ClipBucket versions v5 through 5.5.3-#197 are vulnerable to an SQL injection vulnerability. The issue resides in the admin_area/ads_manager.php file, where authenticated users with ad_manager_access permissions can inject SQL via the delete parameter . By supplying time-based blind payloads conca...

CVE-2026-103765

Mooncake versions through 0.3.13.post1 are affected by a missing authentication vulnerability in the HTTP metadata server /metadata handler . This flaw allows unauthenticated attackers to read, overwrite, and delete transfer engine metadata keys. Specifically, attackers can poison segment descrip...

CVE-2026-103764

The Mooncake transfer engine (versions prior to 0.3.13 ) is vulnerable to an untrusted pointer dereference within the ServerSession::readHeader function. This flaw allows unauthenticated attackers to perform arbitrary memory read and write operations via the TCP transport data port . By sending a...

CVE-2026-104110

The FileRise Pro portal add-on is vulnerable to an unauthenticated information disclosure in the public/api/pro/portals/get.php endpoint. The root cause is a missing authentication gate, allowing any unauthenticated caller who knows or guesses a portal slug to retrieve a full internal record. Thi...

CVE-2026-103761

The Mooncake transfer engine (versions prior to 0.3.14 ) contains a memory exhaustion vulnerability located in the TransferMetadata::receivePeerNotify function. An unauthenticated attacker can cause the process memory to grow without limit by repeatedly sending notify frames (up to 1 MB) to the h...

CVE-2026-103760

The Mooncake transfer engine (versions prior to 0.3.14 ) is susceptible to a denial of service (DoS) vulnerability. An unauthenticated remote attacker can block the handshake daemon by sending a Metadata request to the handshake RPC port and failing to read the replies. This action stalls the sin...

CVE-2025-71427

The Office-PowerPoint-MCP-Server (versions prior to 2.0.8 ) is vulnerable to a path traversal flaw. This vulnerability allows MCP callers to read and write files outside the intended working directory by providing absolute paths or ../ sequences. An attacker can leverage prompt injection to manip...

CVE-2026-18397

The SConnect native host component is vulnerable to unauthenticated remote code execution (RCE) . The flaw stems from a combination of cryptographic weaknesses and memory management issues , where an unrestricted messaging interface between an attacker-controlled web page and the native host allo...

CVE-2026-86344

A flaw in 389-ds-base allows an unauthenticated remote attacker to perform a denial of service (DoS) attack. By sending a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on a single connection, the attacker can force the server to hand that connection to a second ...

CVE-2026-27873

Johnson Controls EasyIO FG is vulnerable to a Use of Hard-coded Credentials vulnerability (CWE-798) in versions before 2.0b52 . This flaw allows for password spraying attacks. No specific exploit details or remediation steps are provided in the documents.

CVE-2026-64893

The Johnson Controls EasyIO Neo series (EC and CW controllers) is vulnerable to a Cleartext Transmission of Sensitive Information vulnerability (CWE-319). This flaw allows an attacker to intercept and read sensitive data, such as credentials and session data , transmitted over the network via a M...

CVE-2026-64892

The Johnson Controls Easy IO Neo (specifically EC and CW Controllers ) is vulnerable to an Exposure of Sensitive Information vulnerability affecting versions before 3.3b63 . The flaw allows an attacker to collect data from common resource locations, potentially providing access to sensitive infor...

CVE-2026-104356

PictShare, a self-hosted image and media host, is vulnerable to a weak randomness issue in versions prior to 3.7.1 . The getRandomString() function in src/inc/core.php utilizes the non-cryptographic rand() PRNG to generate the delete_code authorization token. Because the same generator produces t...

CVE-2026-34494

A vulnerability in the On-Chip Debug Interface of Johnson Controls Neo Series MVP2 (versions before 3.3b63 ) allows an attacker to Collect Data from Common Resource Locations . The issue is associated with CWE-1191 (On-Chip Debug and Test Interface With Improper Access Control). The CVSS 4.0 scor...

CVE-2026-34493

A vulnerability in the On-Chip Debug Interface of Johnson Controls EasyIO FS32 (versions before 3.3b63 ) allows an attacker to Collect Data from Common Resource Locations . This issue is associated with CWE-1191 , involving an On-Chip Debug and Test Interface with Improper Access Control . The vu...

CVE-2026-71449

The Johnson Controls EasyIO FS32 software contains a Use of Hard-coded Cryptographic Key vulnerability (CWE-321) affecting versions prior to 3.0b63 . The flaw stems from the use of a fixed secret key for encryption or decryption processes, which enables an attacker to retrieve embedded sensitive ...

CVE-2026-71448

The Johnson Controls EasyIO FS32 (versions before 3.0b63 ) is susceptible to an Insecure Default Initialization of Resource vulnerability (CWE-1188). This security flaw allows for Authentication Abuse . The documents do not provide specific technical details regarding the root cause, exploit vect...

CVE-2026-71454

This vulnerability involves improper neutralization of input during web page generation, leading to Cross-Site Scripting (XSS) as defined by CWE-79 and CAPEC-63 . The issue specifically affects versions of CAPEC-63 prior to 3.0b63 . The impact includes a potential for unauthorized script executio...

CVE-2026-71453

The Johnson Controls EasyIO FS32 firmware (versions before 3.0b63 ) is vulnerable to an External Control of File Name or Path vulnerability. This flaw allows an attacker to perform a traversal attack , potentially enabling unauthorized access to files or directories outside the intended scope. No...

CVE-2026-104051

PictShare versions prior to 3.7.1 are vulnerable to an information disclosure vulnerability via the API::info() endpoint. The root cause is the lack of a field whitelist, allowing unauthenticated attackers to retrieve complete raw metadata objects. By using a publicly visible file hash, an attack...

CVE-2026-71452

Johnson Controls EasyIO FS32 (versions prior to 3.0b63 ) is vulnerable to an OS Command Injection flaw. This vulnerability allows an attacker to execute arbitrary operating system commands on the affected device. To remediate this issue, users should update EasyIO FS32 to version 3.0b63 or later....

CVE-2026-104002

The data masking utility in Powertools for AWS Lambda (Python) is vulnerable to a fail-open error handling issue in versions prior to 3.35.0 . This flaw allows actors to read sensitive field values that the application intended to mask because the system continues to operate rather than denying a...

CVE-2026-71451

An OS Command Injection vulnerability exists in Johnson Controls EasyIO FS32 (versions before 3.0b63 ). This flaw allows an attacker to execute arbitrary operating system commands. To remediate this issue, users should update the software to version 3.0b63 or later. Specific details regarding the...

CVE-2026-27874

The Johnson Controls EasyIO FS32 software is affected by a Use of Hard-coded Credentials vulnerability (CWE-798) in versions prior to 3.0b63 . An attacker can exploit these hard-coded or default credentials to gain unauthorized access to the system. To remediate this issue, users should update Ea...

CVE-2026-102370

The TP-Link Kasa EC70 v4 and EC71 v4 devices are vulnerable because the production debug interface is not logically disabled at the firmware or chip level, and the bootloader remains unlocked. While debug traces are physically severed during manufacturing, an attacker with physical access can res...

CVE-2026-104020

The Amazon Ion Python library (versions prior to 0.15.0 ) is vulnerable to a denial of service due to uncontrolled recursion in the Ion reader . A remote, unauthenticated actor can crash the application by providing a crafted, deeply nested Ion value. To remediate this issue, users should upgrade...

CVE-2026-96780

The figlet.js library (a JavaScript FIG driver) is vulnerable to a Denial of Service via an unbounded loop in its text() and textSync() functions. The root cause is that when the whitespaceBreak option is enabled and the width is set smaller than a single FIGlet character, the breakWord() functio...

CVE-2026-104183

The stream-json micro-library (versions prior to 3.6.0 ) is vulnerable to a prototype pollution flaw within its Assembler component. The root cause is the use of plain assignment to materialize object properties, which allows an input key named __proto__ to invoke an inherited setter. This result...

CVE-2026-104182

The stream-json micro-library is vulnerable to a Denial of Service (DoS) via a flaw in its JSONC parser (specifically at stream-json/jsonc/parser.js and stream-json/jsonc/verifier.js). Prior to version 3.6.0 , the parser restarts comment-terminator scanning from the opening slash whenever a block...

CVE-2026-104181

The Filament full-stack components for Laravel are vulnerable in versions 4.0.0 through 4.13.3 and 5.8.3 . The root cause is that app-based multi-factor authentication (MFA) management actions do not consistently require the current password for confirmation. An attacker with access to an authent...

CVE-2026-102514

PeaZip 11.2.0 and earlier versions are vulnerable to an Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component. The vulnerability occurs during PCOMPRESS1 stream decompression, where the 32-bit compsize field of the first bl...

CVE-2026-55396

The Teledyne FLIR Aware2 software, specifically in versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) , is vulnerable to the cleartext transmission of UDP traffic from the operator control unit to the robot. Because this traffic lacks a cryptographic integrity check , adjacent unauthenticat...

CVE-2026-55395

Teledyne FLIR Aware2 software (versions through 6.9.0.2 for PackBot and 1.7.9 for FirstLook) contains hardcoded passwords in the access control mechanism. This vulnerability allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots by extracting ...

CVE-2026-55394

Teledyne FLIR Aware2 software versions through 6.9.0.2 are vulnerable to unencrypted traffic transmission within the 802.11 network . This flaw allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic of Teledyne FLIR PackBot robots via network sniffing or hijacki...

CVE-2026-55393

Teledyne FLIR Aware2 software is vulnerable to a path traversal flaw in its web interface, affecting PackBot versions through 6.9.0.2 and FirstLook versions through 1.7.9 . This vulnerability arises from unvalidated pathnames , which allows remote unauthenticated attackers to access and read sens...

CVE-2026-14984

Teledyne FLIR Aware2 software, versions through 6.9.0.2 , is vulnerable to cleartext transmission in its primary control endpoints. This flaw allows remote unauthenticated attackers to intercept, hijack, or modify session traffic targeting Teledyne FLIR PackBot robots by sniffing or hijacking net...

CVE-2026-14983

Teledyne FLIR Aware2 software versions through 6.9.0.2 are vulnerable to a denial of service (DoS) attack due to missing authentication in the web interface. An unauthenticated remote attacker can exploit this by misusing the reboot endpoint on Teledyne FLIR PackBot robots running the affected so...

CVE-2026-53964

The Document Merge Service is vulnerable to Remote Code Execution (RCE) via Server-Side Template Injection (SSTI) in versions prior to 9.1.0 . The flaw exists because the xltpl library uses a non-sandboxed Jinja environment to process XLSX templates . An attacker can supply malicious template con...

CVE-2026-55252

OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be bypassed by attackers, leading to open redirect attacks. This issue has been patched in version...

CVE-2026-55251

The NetBox Device Type Library is vulnerable to arbitrary code execution on its CI runner. A contributor with no special repository access could open a pull request modifying requirements.txt , .pre-commit-hooks-config.yaml / .pre-commit-yamlfmt-config.yaml , or .gitmodules files. The CI workflow...

CVE-2026-103484

A flaw in pgvector before version 0.8.7 allows an authenticated database user to trigger an out-of-bounds write during an Inverted File Flat (IVFFlat) index build operation. This vulnerability can lead to arbitrary code execution or a crash resulting in a denial of service on the database server....

CVE-2026-102628

The Cadmos LTI application (hosted at cadmos.eummena.io) was vulnerable because Laravel debug mode was enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment. An unauthenticated attacker could trigger an unhandled exception via a GET request , causing the application to expo...

CVE-2026-100251

Versions of Wormhole.app deployed before 2026-08-22 are vulnerable to a server-side request forgery (SSRF) due to a misconfiguration in the coturn TURN server . The flaw arises because the application fails to properly restrict TCP relay peers , enabling an unauthenticated attacker to access inst...

CVE-2026-93832

A Motorola system application component was exported without permission , creating a security flaw that allows for the revocation of runtime permissions from other applications. The vulnerability is associated with CWE-862 (Missing Authorization) . No specific affected versions or remediation ste...

CVE-2026-102671

The Joyland AI app is vulnerable because its invisible advertisement WebView accepts invalid SSL certificates by default. This flaw falls under CWE-295 (Improper Certificate Validation), potentially allowing for man-in-the-middle attacks within that specific WebView component. No specific version...

CVE-2026-102670

The Joyland AI app is vulnerable because it explicitly permits cleartext HTTP traffic on devices running Android 9+ . This configuration deviates from the platform's default security behavior, which is to block such traffic, potentially exposing sensitive information during transmission. No speci...

CVE-2026-102669

The Joyland AI app is vulnerable to a security flaw because it does not verify hostnames . This improper validation of certificates with host mismatches (CWE-297) allows a malicious host to establish a connection or intercept chat messages . No specific exploit information or remediation details ...

CVE-2026-54049

The Sakai Collaboration and Learning Environment is vulnerable to stored cross-site scripting (XSS) in the Conversations tool (versions 23.0 to before 23.5, and 25.0 to before 25.3). The root cause is the lack of HTML sanitization when storing topic and post messages via the ConversationsServiceI...

CVE-2026-102668

The Joyland AI app is vulnerable to improper certificate validation because it accepts any TLS certificates from any server without validation. This flaw can allow attackers to intercept or manipulate communications. No specific remediation, exploit details, or affected versions were provided in ...

CVE-2026-102667

The Joyland AI app is vulnerable to a JavaScript injection flaw in its WebView component, exploitable by an attacker with shared network access . The root cause allows unauthorized access to the clipboard , app-internal storage , and the ability to make arbitrary HTTP requests via the Weex 'strea...