CVE-2026-18301

The connected PT document PT-2026-65958 documents a concrete vulnerability: GIMP PSD File Parsing Integer Overflow Remote Code Execution. The issue concerns the PSD file parser component in GIMP, where an integer overflow during PSD parsing can lead to arbitrary code execution on affected systems...

CVE-2026-18265

PT-2026-65933 documents a Missing Authentication Remote Code Execution vulnerability in OSNEXUS QuantaStor. The provided snippet does not include product version, affected components, root cause, exploit details, or remediation steps, and there is no explicit CVE mapping to CVE-2026-18265 in the ...

CVE-2026-18284

The connected PT Security entry PT-2026-65948 documents a Sony XAV-9500ES vulnerability in the Crash Dump Handler that enables Command Injection leading to Local Privilege Escalation. Impact: local escalation via crafted input to the Crash Dump Handler. The CVE entry CVE-2026-18284 remains with r...

CVE-2026-18259

Summary: The Token Content Access module for Drupal allows content access via tokens. A timing-attack vulnerability exists because token comparison is not consistently protected, enabling a persistent attacker to potentially guess a valid access token and bypass content-restrictions. Mitigation i...

CVE-2026-18281

The connected PTSecurity entry PT-2026-65945 reports a heap-based buffer overflow in the L2 reassembly SDU path of Sony XAV-9500ES, enabling remote code execution. Affected component: L2 reassemble sdu. Impact is remote code execution as described. No vendor/version details or remediation are pro...

CVE-2025-60931

Summary: CVE-2025-60931 affects Infor Global HR v11.24.10.01.33 and is an Insecure Direct Object Reference (IDOR) in the Employee Compensation View function. An unauthorized attacker can view other employees’ compensation information via a crafted GET request. This vulnerability is categorized wi...

CVE-2026-18272

Technical details for CVE-2026-18272 are not publicly available in the provided documents. Monitor for updates.

CVE-2025-67408

CVE-2025-67408 affects Sourcecodester CASAP Automated Enrollment System 1.0. The vulnerability is an SQL Injection in /save_user.php via the parameter status. Documented impact is partial confidentiality, integrity, and availability impact with a CVSS 3.1 base score of 7.3 (HIGH), attack vector N...

CVE-2026-18295

The connected PT-2026-65952 entry identifies a vulnerability in GStreamer MRF file parsing causing an out-of-bounds write and remote code execution. The impact is stated as Remote Code Execution, triggered via parsing of MRF files; no affected product versions, detailed root cause, or exploit spe...

CVE-2026-18271

Technical details for CVE-2026-18271 are not publicly available in the provided documents. Monitor for updates and new disclosures as information may be released later.

CVE-2026-18286

Technical details for CVE-2026-18286 are not publicly available in the provided documents. Monitor for updates; no explicit affected products, root cause, impact, or fixes are described here.

CVE-2026-62660

The connected PTSecurity entry PT-2026-65967 documents a vulnerability described as “Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability.” The information provided is limited: it identifies the vulnerability class (arbitrary file deletion) and the affected product name (...

CVE-2025-67407

CVE-2025-67407 affects Sourcecodester CASAP Automated Enrollment System 1.0. The connected documents confirm a SQL Injection vulnerability in update_student.php triggered via the parameters fname and student_class . The CVSS 3.1 base metrics indicate a HIGH severity (7.3) with network attack vect...

CVE-2025-69949

CVE-2025-69949 affects Kishan0725 Hospital Management System 4.0. The vulnerability is a SQL Injection in check_availability.php exploitable via the parameters emailid and email. The CVSS 3.1 base score is 7.3 (High) with network attack vector, low attack complexity, no privileges required, and n...

CVE-2026-18287

Technical details for CVE-2026-18287 are not publicly available in the provided documents. The connected PT Security entry mentions a Code Injection / Remote Code Execution vulnerability but does not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2025-69942

CVE-2025-69942 affects kishan0725 Hospital Management System 4.0 and is described as a SQL Injection vulnerability in the endpoint /hms/doctor/view-patient.php?viewid=1. The connected sources provide explicit vulnerability details (SQLi in the listed path) and a CVSS 3.1 vector with base score 9....

CVE-2026-18298

PT-2026-65955 references CVE-2026-18298 and describes a GStreamer PNG file parsing heap-based buffer overflow that enables remote code execution. The connected document provides the vulnerability type and impact but does not specify affected GStreamer versions, root cause details beyond heap-base...

CVE-2026-18306

Summary: PT-2026-65963 describes a remote code execution vulnerability in the GIMP SGI file parser caused by an integer overflow. The issue is triggered during SGI file parsing and could allow arbitrary code execution on affected systems. The Connected document confirms the vulnerability class an...

CVE-2026-18308

GIMP is reported to have a TIFF file parsing integer overflow leading to Remote Code Execution (RCE) per PT-2026-65965. The vulnerability involves TIFF image parsing and does not include CVE-specific version mappings, exploit details, or patch information in the provided documents. The connected ...

CVE-2026-18280

PT Security PT-2026-65944 documents a gpsd buffer overflow in Sony XAV-9500ES devices that leads to arbitrary code execution. The CVE-2026-18280 entry is reserved here and public details are not provided within the initial document. No remediation details are supplied in the connected documents.

CVE-2026-18285

CVE-2026-18285 is reserved with no public details in the initial description. The connected PT-2026-65949 entry documents a Remote Code Execution vulnerability described as deserialization of untrusted data. No affected product/version, exploit status, or remediation information is provided in th...

CVE-2026-15686

The connected PT-2026-65931 entry describes an Adminer vulnerability where remote code execution occurs due to an incorrect check of the return value from multi-query execution. The provided documents do not specify affected versions, patch details, or mitigations. Further details on scope and fi...

CVE-2026-18296

CVE-2026-18296 is linked to PT-2026-65953, which documents a GStreamer MRF File Parsing heap-based buffer overflow that allows remote code execution . The connected document provides the vulnerability type and impact but does not specify affected versions, patches, or exploitation details. No add...

CVE-2026-18279

PTSecurity PT-2026-65943 documents a concrete vulnerability: Sony XAV-9500ES RTSP SETUP buffer overflow leading to Remote Code Execution. Details specify the affected device and the vulnerability class, but do not provide exploit code or remediation steps. Exploit status and exact fix/version are...

CVE-2026-56846

Node.js vulnerability CVE-2026-56846 is confirmed in the July 2026 security releases. A flaw in HTTP/2 retained headers can bypass maxSessionMemory limits, enabling remote memory exhaustion across active release lines (24.x and 22.x; also affecting 26.x). Affected components are HTTP/2 handling l...

CVE-2026-58087

CVE-2026-58087 is detailed in the FreeBSD advisory FREEBSD-SA-26:54.sysvsem. It describes a heap out-of-bounds access in the kernel’s semctl(2) handling for System V semaphores, affecting all supported FreeBSD versions. The vulnerability arises when GETALL/SETALL read/write operations drop the lo...

CVE-2026-18300

CVE-2026-18300 appears to be a reserved entry, but a connected vulnerability entry PT-2026-65957 describes a concrete issue: GIMP HDR file parsing contains an integer overflow that enables remote code execution. The affected component is GIMP’s HDR image parsing logic; root cause is an integer ov...

CVE-2026-56822

CVE-2026-56822 affects Netty’s OcspServerCertificateValidator. The TOCTOU race forwards SslHandshakeCompletionEvent before OCSP validation finishes, potentially allowing downstream handlers to send data to a revoked server before the OCSP check closes the channel. Affected releases: prior to 4.1....

CVE-2026-56821

CVE-2026-56821 (Netty) affects Netty’s OcspServerCertificateValidator. Prior to 4.1.136.Final and 4.2.16.Final, it flags an out-of-date OCSP response but does not stop processing, causing an expired GOOD response to be treated as VALID. This can allow an on-path attacker to replay a stale GOOD OC...

CVE-2026-49446

Technical details for CVE-2026-49446 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-59921

CVE-2026-59921 affects Netty’s HttpPostRequestEncoder. Before 4.1.136.Final and 4.2.16.Final, multipart HTTP request bodies were built by directly concatenating user-supplied filenames/field names into Content-Disposition headers without validating CRLF. This allows an attacker-controlled filenam...

CVE-2026-54659

Pagy (Ruby gem) contains a vulnerability in the I18n locale handling prior to 43.5.6: Pagy::I18n.locale= stores locale values verbatim and later uses them as .yml path components, enabling untrusted params[:locale] values with absolute paths or ../ sequences to probe file existence/readability of...

CVE-2026-54650

CVE-2026-54650 describes a path traversal vulnerability in openhole-server prior to 0.1.2. In 0.1.1 and earlier, internal/server/public_proxy.go forwarded the request using r.URL.Path instead of preserving the original target via r.URL.EscapedPath(). This allowed percent-encoded dot segments (%2e...

CVE-2026-54658

Hypequery/clickhouse (TypeScript semantic layer for ClickHouse) contains a SQL injection due to escapeValue() not escaping backslashes before single quotes during parameter substitution in packages/clickhouse/src/core/utils.ts, prior to version 2.0.2. This allows attacker-controlled query paramet...

CVE-2026-54638

gotd/td, a Go MTProto client, is affected by a pre-auth denial of service in proto.UnencryptedMessage.Decode where dataLen from an unauthenticated MTProto unencrypted packet could trigger unbounded memory allocation before validating the buffer. This could cause excessive memory usage and CPU/GC ...

CVE-2026-47219

CVE-2026-47219 : The vulnerability affects the find-my-way HTTP router. Versions before 9.7.0 are susceptible to remotely triggerable DoS when used with Node's HTTP/2 server. The issue arises because lookup() passes req.method to find(), and find() indexes this.trees[method]. Since this.trees is ...

CVE-2026-66064

goshs is affected by an ACL/Path Traversal vulnerability in the httpserver/handler.go sendFile logic prior to version 2.1.5. The authorization filename was derived from raw req.URL.Path while using a cleaned path for file access, allowing a trailing slash to bypass .goshs ACL-file protection and ...

CVE-2026-66063

Summary: CVE-2026-66063 affects goshs, a single‑binary file server. The vulnerability is in the httpserver/updown.go multipart upload handler, which before 2.1.5 splits part.FileName() on “/” but does not reject “..”, enabling an unauthenticated upload with filename “..” to create a file outside ...

CVE-2026-64863

Summary: CVE-2026-64863 affects goshs, a single-binary file server. Prior to version 2.1.4, the httpserver/server.go wdGuard treated WebDAV MOVE as a write operation without enforcing --no-delete, allowing WebDAV clients to delete or overwrite files by MOVE with Overwrite: T. This could enable un...

CVE-2026-54719

The CVE-2026-54719 vulnerability affects goshs, a single-binary file server. Before version 2.1.1, the httpserver/updown.go bulkDownload handler invoked via the ?bulk and file= ZIP downloads could bypass ACL checks (findEffectiveACL / applyCustomAuth), permitting unauthenticated reads of files pr...

CVE-2026-62325

Goshs 2.1.3–2.1.4 SFTP authentication bypass vulnerability arises from sftpserver/sftpserver.go password handler: it only checks Username != "" && Password != "", which allowed unauthenticated access when running with -b 'admin:' -sftp and without -fkf. The issue effectively lets an attacker acce...

CVE-2026-55389

The CVE affects datamodel-code-generator (pre-0.62.0), where JSON Schema $ref resolution in src/datamodel_code_generator/parser/jsonschema.py using is_url/_get_ref_body could read arbitrary local files (via file:// or ../ traversal) when --no-allow-remote-refs is not honored. This could expose se...

CVE-2026-54653

The CVE affects the datamodel-code-generator project. From versions 0.17.0 through 0.60.2, the tool could preserve attacker-controlled default_factory values in JsonSchemaObject.init/get_field_extras, emitting them into Field(default_factory=...) and enabling Python expression execution when the ...

CVE-2026-55391

CVE-2026-55391 affects the datamodel-code-generator project. Prior to version 0.63.0, the tool validates a URL host in http.py via get_body, _validate_url_for_fetch, and _get_ips_from_host, but then allows httpx to resolve the host again for the connection, enabling DNS rebinding to bypass allow_...

CVE-2026-54656

CVE-2026-54656 affects datamodel-code-generator (0.52.1–0.60.2). The issue arises when validators are interpolated from --extra-template-data into @field_validator decorators via _process_validators in src/datamodel_code_generator/model/pydantic_v2/base_model.py, enabling Python code execution up...

CVE-2026-54690

Summary: CVE-2026-54690 affects the datamodel-code-generator project. In versions 0.9.1 through 0.61.0, the tool silently dereferenced attacker-controlled JSON Schema $ref HTTP/HTTPS URLs via src/datamodel_code_generator/parser/jsonschema.py:_get_ref_body, and the --allow-remote-refs gate could w...

CVE-2026-55415

CVE-2026-55415 affects datamodel-code-generator prior to 0.64.0. The issue arises from attacker-controlled x-python-import or customTypePath schema extensions that can reach Import.from_full_path/Imports.create_line in the code that handles imports, allowing a newline to break out of an import st...

CVE-2026-54621

datamodel-code-generator is affected: before version 0.60.1, GraphQL Union description values in UnionTypeStatement templates are rendered into Python comments without neutralizing carriage returns, enabling attacker-controlled GraphQL schema content to inject Python code that executes upon impor...

CVE-2026-54655

Summary: datamodel-code-generator (Python) is vulnerable from versions 0.51.0 through 0.60.2 where x-python-type values parsed by src/datamodel_code_generator/parser/jsonschema.py in _get_python_type_override are injected into generated field annotations without sufficient validation, allowing at...

CVE-2026-55403

CVE-2026-55403 affects the Python package datamodel-code-generator. In versions prior to 0.63.0, the code path in src/datamodel_code_generator/http.py:get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects to fetch remote schemas. This can lea...