CVE-2026-85191

Tabs & Accordions is a Joomla extension by regularlabs.com affected by a privileged stored XSS in versions prior to 3.1.0 . The vulnerability resides in the rtla-alias option: the renderer places the alias value inside a quoted JavaScript argument within an HTML onclick attribute without properly...

CVE-2026-85188

CVE-2026-85188 affects several Regular Labs Joomla extensions : Advanced Module Manager (< 12.1.0), Conditional Content (< 8.0.0), Content Templater (< 14.2.0), and ReReplacer (

CVE-2026-90688

Tenda W20E (version 15.11.0.61068_1546_841_CN_TDC ) is affected by a stack-based buffer overflow in the function formIPMacBindAdd within the HTTP Handler component. Manipulating the IPMacBindRule argument triggers the overflow. The vulnerability is exploitable remotely with low privileges and no ...

CVE-2026-16726

A buffer overflow in the Panasonic Industry USB Driver for MINAS A5/A6 (an AC servo product) allows local attackers with low privileges to cause a denial of service by stopping Windows . The CVSS 4.0 score is 6.8 (MEDIUM) with a local attack vector, low complexity, no user interaction, and high a...

CVE-2026-90687

GPAC (up to commit f1219cde) contains a use-after-free vulnerability in the function gf_node_changed_internal within the file scenegraph/base_scenegraph.c , part of the MP4Box component. The flaw can be triggered remotely with no privileges required but requires user interaction (per CVSS 3.1: 6....

CVE-2026-90686

GPAC up to commit f1219cde is affected by a memory corruption vulnerability in the gf_bt_report function of scene_manager/loader_bt.c within the MP4Box component. The flaw can be triggered remotely without authentication or user interaction, resulting in a low availability impact with no confiden...

CVE-2026-90685

CVE-2026-90685 affects GPAC (up to commit f1219cde), specifically the function lsr_exec_command_list in the file laser/lsr_dec.c within the MP4Box component. The root cause is a reachable assertion (assert(!codec-bs)), leading to a denial of service with LOW availability impact. Attack requires l...

CVE-2026-90684

A reachable assertion vulnerability exists in GPAC (up to commit f1219cde), specifically in the function gf_node_get_field_count within the file scenegraph/base_scenegraph.c of the MP4Box component. A local attacker with low privileges and passive user interaction can trigger the assertion, resul...

CVE-2026-90683

CVE-2026-90683 affects GPAC (through commit f1219cde), specifically the MP4Box component. The vulnerability resides in the function gf_node_unregister in scenegraph/base_scenegraph.c and results in a reachable assertion failure, leading to a local denial-of-service. A local attack is required, wi...

CVE-2026-90682

A heap-based buffer overflow in the ProcessGpsInfo function of gpsinfo.c (WebP EXIF Handler) affects Matthias-Wandel jhead up to 3.3 . Manipulation of the TAG_GPS_LAT/TAG_GPS_LONG arguments triggers the overflow. The attack vector is local with low privileges required, yielding partial impact on ...

CVE-2026-90681

An out-of-bounds read vulnerability exists in Matthias-Wandel jhead up to version 3.3 , specifically in the function Get16u within exif.c of the EXIF Parsing component. The flaw is exploitable via local access and results in a low availability impact, rated LOW (CVSS 3.1 base score 3.3; CVSS 4.0 ...

CVE-2026-90680

A stack-based buffer overflow in D-Link DIR-823G (version 1.0.2B05_20181207) affects the HNAP1 component, specifically the strcpy function within the /HNAP1/SetStaticRouteSettings endpoint. Manipulating the PAddress/SubnetMask/Gateway arguments triggers the overflow, enabling a remote attack. The...

CVE-2026-90623

CVE-2026-90623 affects andreashappe cochise up to version 0.4.1 . The vulnerability resides in the SSH Host Key Handler component, specifically the asyncssh.connect function in src/cochise/ssh_connection.py, and stems from improper certificate validation . A remote attacker with high complexity c...

CVE-2026-90622

GNU libredwg 0.13.4 is affected by a null pointer dereference in the DWG_TABLE function of the Layer Encoding component (src/dwg.spec). The root cause is two raw zeroing assignments introduced by commit 27118c40 ("encode: also disable LAYER.material") that dereferenced a NULL material handle , wh...

CVE-2026-90621

CVE-2026-90621 is an OS command injection vulnerability in ipa-lab HackingBuddyGPT (versions up to 0.5.0 ), affecting the ssh_run_command function within src/hackingBuddyGPT/extensions/ssh_run_command.py. The attack can be launched remotely and requires low privileges , with no user interaction n...

CVE-2026-90620

0x4m4 HexStrike AI is affected by a missing authentication vulnerability in the API Command Endpoint (file hexstrike_server.py), allowing remote attackers to exploit it with no prior privileges. The affected range extends up to commit d689933ff579d839c676c82b231f8e98326c5f04; no specific version ...

CVE-2024-50961

CVE-2024-50961 affects DonWeb Ferozo Hosting v1.1 . The vulnerability is a sensitive data exposure caused by improper handling of URL parameters , allowing an unauthenticated remote attacker to access sensitive data including database credentials . Attack complexity is low , requires no privilege...

CVE-2026-90619

0x4m4 HexStrike AI (up to commit d689933ff579d839c676c82b231f8e98326c5f04 ) is affected by an OS command injection in the Execute Endpoint of the file hexstrike_server.py . An unauthenticated remote attacker can manipulate the code/script argument to inject arbitrary OS commands. The proof-of-con...

CVE-2026-90618

GH05TCREW PentestAgent (up to commit cf882dabea3ed91cef016cdd115e5426315665a2) is vulnerable to OS command injection in the function LocalRuntime.execute_command within the file runtime/runtime.py. The flaw allows a remote, unauthenticated attacker with no user interaction to execute arbitrary co...

CVE-2026-90617

GH05TCREW PentestAgent contains an os command injection in the MCP HTTP Server component, specifically in the run_task function of interface/main.py . The vulnerability is reachable remotely with no privileges required, allowing an attacker to manipulate input to execute arbitrary OS commands. Im...