CVE-2026-108786

A vulnerability exists in houtini-ai seo-crawler-mcp up to version 2.1.5 within the Crawler component. The flaw resides specifically in the run_seo_audit function located in the src/core/CrawlOrchestrator.ts file. This vulnerability allows for server-side request forgery (SSRF) and can be launche...

CVE-2026-66086

A stack-based buffer overflow exists in the modem OTA stack due to improper validation of scheduling information within SIB1 messages . This vulnerability could allow an attacker to achieve remote code execution or cause a denial of service without requiring additional execution privileges. No sp...

CVE-2026-66085

A vulnerability in the modem component allows for information disclosure due to a lack of filtering for sensitive data within crash dumps . This flaw could result in local information disclosure without requiring additional execution privileges. No specific affected versions, root causes, or reme...

CVE-2026-87765

The kernel apsys DVFS driver is vulnerable to an out-of-bounds read or hardware register corruption . This issue stems from improper input validation of the frequency index. An attacker with local privileges could exploit this vulnerability to cause system instability or a denial of service . No ...

CVE-2026-108785

A flaw in macrozheng mall versions up to 1.0.3 allows for session expiration due to a vulnerability in the JwtAuthenticationTokenFilter component. Specifically, the JwtTokenUtil.refreshHeadToken function (located in the /admin/refreshToken file) fails to properly handle the token argument. This i...

CVE-2026-108784

A business logic error exists in macrozheng mall (up to version 1.0.3) within the Payment Endpoint component. Specifically, the AlipayServiceImpl.pay function in com/macro/mall/portal/service/impl/AlipayServiceImpl.java is vulnerable to the manipulation of the total_amount argument. This flaw can...

CVE-2026-108783

A security vulnerability exists in PRVTPRO Amnezia-Web-Panel versions up to 1.6.2/1.7.2 . The flaw is located within the Backup Download component, specifically affecting an unspecified part of the app.py file. This issue allows for the use of default credentials , which can be exploited via a re...

CVE-2026-108782

A SQL injection vulnerability exists in the erzhongxmu JEEWMS software, affecting versions up to 2026.09.27-W39 . The flaw is located within the Autocomplete Handler component, specifically in the CommonServiceImpl.getAutoList function of the file src/main/java/org/jeecgframework/core/common/serv...

CVE-2026-108781

The erzhongxmu JEEWMS software (up to version 2026.09.27-W39 ) is vulnerable to a SQL injection flaw within the PDA Interface component. The vulnerability exists specifically in the WmToMoveGoodsController.list function located in the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsContro...

CVE-2026-108779

A SQL injection vulnerability exists in erzhongxmu JEEWMS (versions up to 2026.09.27-W39). The flaw is located in the WmSttInGoodsController.list function within the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java. Specifically, improper handling of the searchstr argument a...

CVE-2025-55480

Technical details are not publicly available in the provided documents for CVE-2025-55480 . The entry is currently reserved, and no concrete information regarding the affected product, root cause, or impact is available. Monitor for updates.

CVE-2024-85097

The WordPress Bricksforge plugin is affected by CVE-2024-85097 , a critical vulnerability (CVSS 10.0) that allows unauthenticated remote code execution . Attackers leverage GIF/PHP polyglot files to deploy web shells on targeted installations. This vulnerability was exploited in the wild by a cam...

CVE-2026-108778

The erzhongxmu JEEWMS software (up to version 2026.09.27-W39) contains a SQL injection vulnerability within the Inbound Quality Check Pda Interface component. Specifically, the WmInQmIController.list function in the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java fails to proper...

CVE-2026-108777

A SQL injection vulnerability exists in erzhongxmu JEEWMS (versions up to 2026.09.27-W39). The flaw is located in the WvGiController.list function within the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. Manipulation of the searchstr argument allows for remote execution of th...

CVE-2026-108775

The erzhongxmu JEEWMS software (up to version 2026.09.27-W39 ) is vulnerable to SQL injection within the Search Endpoint component. The root cause is the improper handling of the searchstr argument in the WvNoticeController.list function located in com/zzjee/wmapi/controller/WvNoticeController.ja...

CVE-2026-108774

A SQL injection vulnerability exists in erzhongxmu JEEWMS (up to version 2026.09.27-W39 ). The flaw is located within the getbinall and getbinallagv functions of the file src/main/java/com/zzjee/md/controller/MdBinController.java. An attacker can exploit this by manipulating the binstore/binid/de...

CVE-2026-108773

The erzhongxmu JEEWMS software (versions up to 2026.09.27-W39 ) is vulnerable to a SQL injection flaw in the docheck function located within src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. An attacker can initiate a remote attack by manipulating the goodscode argument. The docum...

CVE-2026-108772

A path traversal vulnerability exists in bleenco abstruse versions up to 2.1.0 . The flaw is located in the filepath.Join function within the file server/api/worker/download_cache.go file of the Cache Endpoint component. By manipulating the File argument, a remote attacker can perform a path trav...

CVE-2026-108770

The Appwrite platform, specifically the Browser Screenshot Service component in versions up to 2.3.0 , is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is the improper handling of the url argument within the PublicHostname function of the file src/Appwrite/Platform/Modules/A...

CVE-2026-108769

A security flaw exists in zhayujie CowAgent up to version 2.2.0 . The vulnerability affects an unknown part of the Markdown.tsx file within the Markdown Rendering component. Exploitation allows for a denial of service and can be launched remotely . A public exploit is available, and although the ...