CVE-2025-69947

CVE-2025-69947 affects SourceCodester Tailor Management System 1.0, with a vulnerability in the PHP component customeredit.php?id=1 that allows SQL Injection. The CVSS 3.1 score is 9.8 (CRITICAL) with network attack vector, no authentication, and high impacts to confidentiality, integrity, and av...

CVE-2025-69935

The CVE-2025-69935 entry concerns CodeAstro Membership Management System 1.0, with a SQL Injection vulnerability in report.php and revenue_report.php exploitable via the fromDate parameter. The provided metrics show CVSS 3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges or u...

CVE-2026-51272

The connected AttackerkB entry documents a vulnerability in schreibfaul1 ESP32-audioI2S 3.4.5: a heap-based buffer overflow in latinToUTF8() used for Latin-1 to UTF-8 conversion. The code determines the required buffer size by simply doubling the input length and reallocates a heap buffer without...

CVE-2025-69930

CodeAstro Membership Management System 1.0 is affected by a SQL Injection vulnerability in print_membership_card.php?id=1. The associated CVE (CVE-2025-69930) has a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, low attack complexity, no privileges required, and no user interaction, ...

CVE-2026-51291

CVE-2026-51291 is reflected in several connected sources as a use-after-free vulnerability in sqlite 3.41. The issue is reported in the jsonCacheInsert function of the JSON cache management module. Details across sources indicate affected product/version and the underlying flaw, but explicit impa...

CVE-2026-51292

CVE-2026-51292 affects SQLite 3.41, describing a use-after-free in the memory buffer processing logic. The vulnerability allows remote attackers to craft input that can lead to arbitrary code execution, information leakage, or denial of service. The available documents identify the affected produ...

CVE-2026-51293

CVE-2026-51293 is a use-after-free in SQLite 3.41. The vulnerability occurs in the jsonBlobAppendNode() function when it is invoked after sqlite3DbFree() has been called on the aBlob member of the Parse structure. Documents do not provide exploit details, affected version ranges beyond 3.41, or r...

CVE-2025-69938

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the membershipType parameter. CVSS 3.1 base score 9.8 (CRITICAL) with network access, low attack complexity, no privileges, and user interaction not required. Impact is high for confidentiality, integrity, ...

CVE-2026-51290

CVE-2026-51290 entry is rejected/not used and does not represent an active vulnerability.

CVE-2026-62343

CVE-2026-62343 – ImageMagick heap buffer over-write during morphology with a user-supplied invalid kernel. Affected products/versions: ImageMagick before 6.9.13-51 and 7.0.1-0, and before 7.1.2-26. The flaw is triggered during morphology operations using a crafted kernel, leading to a heap buffer...

CVE-2026-64685

ImageMagick vulnerability CVE-2026-64685 affects the BGR decoder. In versions prior to 7.1.2-27, the BGR decoder does not check for an end-of-file in every location, which could lead to a heap buffer over-read when processing a crafted image. The issue has been fixed in version 7.1.2-27. The CVSS...

CVE-2026-53547

Technical details for CVE-2026-53547 are not publicly available in the provided documents. Monitor for updates on affected products, impact, and remediation.

CVE-2026-67595

CVE-2026-67595 affects VaahCMS versions 2.0.0–2.3.4. The vulnerability is a malicious obfuscated JavaScript payload embedded in the Blade template used to render security OTP emails, which can execute in any browser with JavaScript enabled. The payload opens a WebSocket connection to a hardcoded ...

CVE-2026-15157

undici is vulnerable to CRLF injection via a duck-typed blob-like request body’s type property when used as the Content-Type header on HTTP/1.1 dispatchers. Affected ranges: undici before 6.28.0; 7.0.0–before 7.29.0; and 8.0.0–before 8.9.0. An attacker supplying a hand-rolled blob-like body deriv...

CVE-2026-14643

undici vulnerability CVE-2026-14643 affects the cache interceptor in shared-cache mode. In undici versions 7.0.0–7.28.x and 8.0.0–8.8.x, the Cache-Control directive parser mishandles whitespace around the equals sign, causing the directive to be dropped or stored with literal quotes. This can cau...

CVE-2026-16728

Undici contains a defect in its retry interceptor: after a retry or resume of a partial response, it can assemble a body whose length differs from the Content-Length observed by the application. In affected ranges (before 6.28.0, 7.0.0–7.28.x, and 8.0.0–7.29.0 to 8.8.x), a faulty upstream may ret...

CVE-2026-67439

CVE-2026-67439 affects OliveTin prior to 3000.17.0. The StartActionAndWait and StartActionByGetAndWait endpoints in service/internal/api/api.go return full LogEntry output after execution without enforcing the logs permission, enabling a user with exec permission but logs:false to read action out...

CVE-2026-67438

OliveTin versions 3000.2.0 through 3000.17.0 expose a vulnerability where the checkShellArgumentSafety function does not treat regex: custom argument types as unsafe for Shell mode actions. This allows values that pass typeSafetyCheckRegex to be interpolated by wrapCommandInShell into an sh -c co...

CVE-2026-67437

OliveTin: The CVE-2026-67437 issue is in the OAuth2 login path (service/internal/auth/otoauth2/restapi_auth_oauth2.go) where per-login state is stored in an unbounded registeredStates map on every /oauth/login request. This can allow an unauthenticated attacker to exhaust memory and cause a denia...

CVE-2026-54249

CVE-2026-54249 affects Pydantic AI (Python agent framework) when using a Pydantic AI UI adapter (e.g., Vercel AI adapter). Versions 1.65.0–1.105.0 and 2.0.0b1–2.0.0b5 allow an attacker to reference arbitrary files in the application’s model-provider or cloud-storage account via UploadedFile refer...

CVE-2026-46678

Pydantic AI CVE-2026-46678 affects versions 1.56.0–1.98.0 where force_download='allow-local' on a URL influenced by untrusted input can bypass the cloud-metadata blocklist using IPv6 transition forms (IPv4-mapped IPv6, 6to4, NAT64, NAT64/isatap variants). The issue is mitigated by upgrading to 1....

CVE-2026-13308

CVE-2026-13308 affects Autel MaxiCharger AC Elite Home EV chargers. The flaw lies in the handling of WebSocket messages for the OCPP service, caused by insufficient validation of user-supplied data that can trigger an integer underflow before buffer allocation. This can allow an attacker to execu...

CVE-2026-13307

CVE-2026-13307 affects Autel MaxiCharger AC Elite Home EV chargers. The vulnerability is a heap-based buffer overflow in the handling of custom USB packets, caused by insufficient validation of the length of user-supplied data before copying to a fixed-length heap buffer. This can enable a physic...

CVE-2026-13309

Affected product : Autel MaxiCharger AC Elite Home NFC interface. Vulnerability : stack-based buffer overflow in NFC card response handling that can lead to arbitrary code execution . Impact : attacker with physical access can execute code on the device, with full control in its context; benefits...

CVE-2026-13306

Autel MaxiCharger AC Elite Home EV chargers are affected by CVE-2026-13306: a flaw in the exposed USB interface allows physically present attackers to bypass authentication without prior authentication. The issue stems from lack of authentication before accessing functionality, enabling bypass on...

CVE-2026-13305

Autel MaxiCharger AC Elite Home EV chargers are affected by CVE-2026-13305 due to improper verification of cryptographic signatures during software updates. The flaw in update image validation allows a physically present attacker to execute arbitrary code on the device with no authentication. Imp...

CVE-2026-65975

CVE-2026-65975 affects Pydantic AI AG-UI Adapter (AG-UI via Agent.to_ag_ui()/AGUIAdapter and Vercel AI via VercelAIAdapter) in Pydantic AI versions 1.88.0–1.107.0 and 2.0.0b1–2.4.x. The bug arises because sanitize_messages uses a stripping index computed before sanitization, so when a trailing cl...

CVE-2026-67436

CVE-2026-67436 affects Linuxfabrik monitoring-plugins (6.0.0 and earlier), specifically the redfish-* plugins. The root cause is that these plugins build request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, enabling a malicious or compromised BMC to ...

CVE-2026-67435

The issue in linuxfabrik-lib affects the Python module lib.url.fetch() in versions before 6.0.0. It may follow cross-origin redirects while forwarding caller-supplied credential headers other than Authorization and Cookie, enabling a malicious redirect-capable server to receive headers such as X-...

CVE-2026-67433

CVE-2026-67433 affects Linuxfabrik monitoring-plugins (Python plugins for Icinga/Nagios). In version 6.0.0, the logfile check legacy database migration used a predictable path under /tmp via os.rename(), enabling a local user with plugin-account access to place a symlink that is followed by sqlit...

CVE-2026-67432

CVE-2026-67432 affects the MCP Ruby SDK before version 0.23.0. The vulnerability exists in MCP::Server::Transports::StreamableHTTPTransport of the mcp gem, which reads and parses an entire JSON-RPC POST body without a size limit, allowing an unauthenticated remote attacker to exhaust memory on th...

CVE-2026-67431

The CVE affects the MCP Ruby SDK (Model Context Protocol) prior to version 0.23.0. In MCP::Server::Transports::StreamableHTTPTransport, the session ID is not bound to a session owner, allowing a stolen session ID to cause requests (tools/call) to execute in the victim’s session. This is fixed in ...

CVE-2026-63119

The CVE affects the MCP Ruby SDK (mcp gem), specifically MCP::Server::Transports::StdioTransport and MCP::Client::Stdio. The vulnerability arises from using IO#gets without a byte limit, allowing an attacker to send data without a newline and trigger unbounded line buffering, causing memory exhau...

CVE-2026-5057

ATEN Unizon RpcProviderMissing Authentication Denial-of-Service Vulnerability (CVE-2026-5057) affects the RpcProvider component. The flaw is due to missing authentication prior to granting access to RpcProvider functionality, enabling remote attackers to cause a denial-of-service condition. The i...

CVE-2026-67430

CVE-2026-67430 affects the MCP Ruby SDK (mcp gem) prior to 0.23.0. The vulnerability is in MCP::Server::Transports::StreamableHTTPTransport, which does not expire sessions by default, allowing repeated initialize requests to retain unbounded ServerSession objects and cause memory exhaustion. The ...

CVE-2026-5056

GStreamer qtdemux CVE-2026-5056 is a stack-based buffer overflow affecting the qtdemux component. The flaw occurs while parsing UncompressedFrameConfigBox structures due to insufficient validation of user-supplied data length before copying into a fixed-size stack buffer, enabling arbitrary code ...

CVE-2026-5492

The DriveLock vulnerability CVE-2026-5492 affects the web service listening on TCP 4568. It stems from insufficient validation of a user-supplied path, enabling a directory traversal that can disclose information in the context of the service account. Exploitation requires authentication and is d...

CVE-2026-5491

DriveLock exposes a directory-traversal information disclosure via its web service (default port 6067). The flaw is insufficient validation of user-supplied paths used in file operations, allowing remote, unauthenticated access to sensitive information in the service account’s context. Concrete r...

CVE-2026-5490

CVE-2026-5490 involves DriveLock where the web service (listening on TCP 4568 by default) constructs SQL queries from unvalidated user input, leading to a SQL Injection that can escalate privileges. The vulnerability is network-accessible and requires authentication to exploit, with impact descri...

CVE-2026-5489

CVE-2026-5489 concerns the DriveLock web service, which listens on TCP port 4568 by default. The flaw stems from insufficient validation of a user-supplied path used in file operations, allowing a remote attacker to disclose sensitive information in the context of the service account. The impact ...

CVE-2026-5487

The CVE describes a directory traversal in DriveLock’s web service (default port 4568). The vulnerability arises from improper validation of a user-supplied path before file operations, allowing an attacker to disclose sensitive information in the service account context without authentication. T...

CVE-2026-6102

The CVE-2026-6102 entry concerns MSI Center NTIOLib_X64 with a local privilege-escalation flaw in the NTIOLib_X64.sys driver due to insufficient validation of the origin of commands. A local attacker who can run low-privileged code can escalate to SYSTEM and execute arbitrary code. The issue is i...

CVE-2026-13268

The CVE concerns G DATA Total Security, specifically the Backup Service. A flaw allows local attackers to escalate privileges by abusing the service via creating a symbolic link to delete a file, enabling arbitrary code execution in the context of SYSTEM. This aligns with the ZDI advisory referen...

CVE-2026-63118

The MCP Ruby SDK (mcp gem) contains a DNS rebind vulnerability in MCP::Server::Transports::StreamableHTTPTransport where HTTP Host/Origin are not validated. This allows a malicious page to bind a victim’s locally running MCP server to a loopback/ LAN address and post JSON‑RPC requests to exposed ...

CVE-2026-18266

CVE-2026-18266 affects Dify AI Workflow via the OAuth flow in the AppInitializer component, enabling an Open Redirect vulnerability. An attacker can coerce a user to visit a malicious page or file, resulting in a redirection to a site of the attacker’s choosing and potential information disclosur...

CVE-2026-12357

The CVE-2026-12357 entry concerns Heimdall Data Database Proxy. The connected PT-2026-64200 source describes a CRLF injection in the generateFileContent() function, leading to remote code execution with root privileges. The vulnerability allows remote authenticated attackers to execute arbitrary ...

CVE-2025-14562

CVE-2025-14562 affects GitLab CE/EE; versions 10.6–19.0.4, 19.1.x before 19.1.3, and 19.2.x before 19.2.1 are impacted. An authenticated user with developer permissions could commit changes to a project after removal due to improper authorization checks on merge request collaboration settings. Gi...

CVE-2026-3093

GitLab CE/EE contains a Cross-site Scripting (XSS) flaw (CVE-2026-3093) caused by improper sanitization of user-controlled input during web page generation. Affected versions are 14.0 up to 19.0.4, 19.1 up to 19.1.2, and 19.2 up to 19.2.0. Under certain conditions, an attacker could trigger arbit...

CVE-2026-4672

GitLab CVE-2026-4672 affects GitLab CE/EE: 18.4.x before 19.0.5, 19.1.x before 19.1.3, and 19.2.x before 19.2.1. An authenticated user with guest permissions could access test report contents they were not authorized to view due to improper access control enforcement. The issue has been remediate...

CVE-2026-6267

CVE-2026-6267 affects GitLab CE/EE. Affected versions: all 10.1.0 up to but not including 19.0.5, 19.1 up to but not including 19.1.3, and 19.2 up to but not including 19.2.1. Under certain conditions, an authenticated user with the Developer role could access unauthorized information due to insu...