exploit

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java that enables reactive database operations within Java applications.

The vulnerability exists in PrivateBin’s attachment download link, allowing stored cross-site scripting. An anonymous attacker can create a paste containing

When PAM (dialog) authentication is used, the MariaDB Connector/J can be coerced into sending the account password in cleartext over

How CVE-2026-55761 Works Portainer CE is a lightweight management platform for containerized environments including Docker, Swarm, Kubernetes, and ACI. The

The vulnerability resides in the semi-fungible token (SFT) supply management logic of the Klever blockchain protocol’s Go implementation, klever-go. Specifically,

Graylog’s syslog input module contains a key-value parser designed for Fortigate device logs. This parser extracts fields based on delimiters

The vulnerability resides in Graylog’s REST API endpoint responsible for revoking user access tokens. Graylog allows users to generate personal

CVE-2026-55848 is a high-severity XML External Entity (XXE) injection vulnerability affecting MapFish Print, an open-source Java library used for generating

The Pimcore Studio API class definition creation endpoint is vulnerable due to an incorrect permission guard, allowing users with only

Intro: A critical vulnerability exists in Pimcore where a DataObject class-definition field name is concatenated, without an identifier allowlist, directly

The vulnerability resides in the `OwnedView` type of the `buffa` crate, a Rust library used for parsing and viewing binary

The vulnerability resides in the storage volume creation handler of Incus. When a user initiates a copy of a custom

The vulnerability stems from the `isLocalRequest` function in src/dashboardGuard.js, which determines if a request originates from the local machine solely

The vulnerability exists due to an improper authorization check in the `superuser_validators` helper function used by `piccolo_admin` to protect the

The vulnerability resides in the `decode_unknown_field` function of Buf’s protobuf decoder, which handles unknown fields when `preserve_unknown_fields=true` (the default setting

The vulnerability resides in the instance copy workflow of the Incus daemon (incusd). When a client sends a POST request

ORAS (OCI Registry As Storage) is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions

The vulnerability resides in plone.app.event’s iCalendar import view, specifically within the `ical_import` method that processes uploaded .ics files using the

The Pimcore Studio Backend Bundle contains a critical account takeover vulnerability. An unauthenticated attacker can exploit the password reset functionality.

How CVE-2026-55228 Works Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7,

Several of AIIR’s verification and policy paths could return a success or “verified” result without actually enforcing the control they

The SSRF deny-list in Bifrost’s core/providers/utils/fetch.go is implemented by isPublicIP, which determines if a target address is routable on the

Protego is a pure-Python `robots.txt` parser with support for modern conventions. A critical ReDoS (Regular Expression Denial of Service) vulnerability,

The vulnerability arises from the OS-dependent implementations of AbstractLocalCommandExecutor in the powsybl-computation-local module. Both UnixLocalCommandExecutor and WindowsLocalCommandExecutor are subject to

The vulnerability identified as CVE-2026-55248 resides in the RSS portlet functionality of plone.app.portlets, a core package that provides portlets and

How CVE-2026-XXXX Works This vulnerability is a time-based blind SQL injection found in Pimcore Studio’s backend API. It allows an

The vulnerability exists within the ALOS HTTP Server framework, specifically in the request parsing logic. When the server receives an

The vulnerability resides in the way 9router handles authorization for its OpenAI/Anthropic-compatible LLM proxy. The proxy is exposed via a

Pimcore’s `Hotspotimage` field deserializes stored metadata without a class allowlist due to the `Serialize::unserialize()` wrapper defaulting to unrestricted deserialization. The

CVE-2026-55175 is a high-severity vulnerability affecting Spinnaker’s rosco service, specifically during Kustomize bake operations. The rosco service is responsible for

Weblate is a web-based continuous localization platform used to manage software translations across teams and projects. In versions prior to

How CVE-2026-55215 Works MariaDB Connector/Node.js is a library that enables Node.js applications to connect to MariaDB and MySQL databases. When

KubeVela’s Terraform remote configuration loader is vulnerable to a denial-of-service (DoS) attack. The `vela-core` controller can be forced to read

The default Phalcon MVC router registers a built‑in route compiled to the PCRE pattern ^/([\w0-9\_\-]+)/([\w0-9\.\_]+)(/.)$u. The trailing `(/.)` contains a

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From version 0.40.0 through 0.91.1,

aquaproj/aqua extracts downloaded tool archives through its pkg/unarchive/archives.go package, which relies on the github.com/mholt/archives library. The core vulnerability lies in

The vulnerability stems from a systemic anti-pattern across trestle’s Jinja2 rendering pipeline where untrusted runtime data is re-parsed as executable

The vulnerability resides in the settlement logic of the Klever blockchain’s marketplace module. When an order is settled, the buyer’s

The vulnerability arises in the validation of split royalties for KDA assets on the Klever blockchain. When creating an asset,

The vulnerability identified as CVE-2026-82250 resides in the `gix-packetline` crate, a core component of the Gitoxide project responsible for handling

CVE-2024-42353 and CVE-2026-44889 represent a class of open redirect vulnerabilities in the Pylons WebOb library, which is widely used in

Ray is an AI compute engine widely used for distributed machine learning and scaling Python workloads. Prior to version 2.52.0,

CVE-2026-55040 is a critical authentication bypass vulnerability in Microsoft SharePoint Server’s JSON Web Token (JWT) validation pipeline. It carries a

In the Linux kernel, a critical vulnerability has been identified in the IPv6 networking stack, specifically within the `__ip6_append_data()` function.

CVE-2026-53362 is a vulnerability in the Linux kernel’s IPv6 stack that allows an unprivileged local attacker to trigger a heap-based

CVE-2026-33824 is a critical double-free vulnerability discovered in the Windows Internet Key Exchange (IKE) Extension, a core component responsible for

CVE-2026-72529 describes a critical security vulnerability in TrueConf Server. The flaw resides in the server’s network service listening on port

CVE-2026-8452 is a memory overflow vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The vendor initially described the issue as

CVE-2026-66384 is a path traversal vulnerability in JFrog Artifactory that allows an authenticated user to write data outside the intended

Crossplane allows package signature verification to be configured via the `ImageConfig` mechanism. When enabled, the package manager uses cosign to

CVE-2026-59310 is a critical directory traversal vulnerability (CWE-22) affecting the Syslog server component of VMware vCenter. The flaw stems from

CVE-2026-60004 is a critical remote code execution vulnerability affecting Gitea, a popular self-hosted Git service. The flaw resides in the

CVE-2026-72530 describes a critical code injection flaw affecting TrueConf Server, a popular video conferencing platform. The vulnerability resides in the

CVE-2026-66384 is a path traversal vulnerability (CWE-22) affecting JFrog Artifactory’s Docker cache subsystem. The flaw allows an authenticated user to

This CVE affects Zimbra Collaboration Suite (ZCS) versions prior to 10.1.20. The vulnerability exists within the optional zimbra-snmp extension package.

CVE-2023-49105 – ownCloud core before version 10.13.1 contains a critical improper authentication vulnerability that allows unauthenticated attackers to access, modify,

The vulnerability resides in the `libreoffice-convert` Node.js library, which is used to convert documents via LibreOffice in headless mode. The

How CVE-2026-54687 Works This vulnerability resides in the `n8n-nodes-sqlite3` package, which is used to add a SQLite node to n8n

CVE-2026-54721 is a remote code execution (RCE) vulnerability affecting the Silverstripe UserForms module, discovered by Jack Wallace of Bastion Security

The Kargo UI reads a `redirectTo` query parameter on the `/login` and `/token-renew` routes. Following a successful OIDC authentication, the

Technical Deep Dive: How CVE-2026-54718 Works The `symbiote/silverstripe-advancedworkflow` module extends the Silverstripe CMS by providing a graphical interface for creating

Technical Analysis of CVE-2026-54720 Silverstripe Framework is a PHP framework that powers the Silverstripe CMS. In versions prior to 6.2.2,

How CVE-2021-23758 Works AjaxPro.2 (also known as Ajax.NET Professional) is a popular AJAX framework for Microsoft ASP.NET that automatically creates

CVE-2026-9989 is a vulnerability in Google Chrome’s Media component that allows a remote attacker to bypass the Same Origin Policy

The original CVE-2026-45309 addressed a path traversal in AsyncSSH’s `AuthorizedKeysFile` %u substitution, where an attacker could use `../` sequences to

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the SunEditor Embed plugin (CVE-2026-54606). The plugin parses user‑supplied embed HTML using

This vulnerability, tracked as CVE-2026-54591, affects all versions of the AsyncSSH library up to and including 2.23.0. The flaw resides

CVE-2026-9985 details a high-severity vulnerability affecting Google Chrome on ChromeOS. At its core, the issue stems from insufficient validation of

CVE-2026-9991 is a high-severity vulnerability affecting Google Chrome on Windows prior to version 148.0.7778.216. The flaw exists within the Media

Cloudreve’s WebDAV feature allows creating scoped accounts tied to a specific folder via a `uri` (e.g., cloudreve://my/restricted). The vulnerability arises

CVE-2026-9994 is a high-severity use-after-free vulnerability identified in the Core component of Google Chrome on the Windows platform. This memory

CVE-2026-9997 is a high-severity use-after-free vulnerability affecting Google Chrome’s Input component. This memory corruption flaw resides in how Chrome handles

How CVE-2019-1068 Works CVE-2019-1068 is a remote code execution vulnerability residing in the Microsoft SQL Server Database Engine. The flaw

CVE-2026-8452 is a memory overflow vulnerability affecting Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. The flaw resides in

The Automatic Bug Reporting Tool (ABRT) is a system service designed to automatically detect, collect, and report application crashes on

The vulnerability CVE-2026-9992 resides in the Network component of Google Chrome, specifically a Use After Free (UAF) condition triggered during

CVE-2026-9988 targets the WebRTC component within Google Chrome’s rendering engine on Linux platforms. This vulnerability stems from a Use-After-Free (UAF)

CVE-2026-9981 details an improper implementation within Google Chrome’s Skia graphics engine, affecting versions prior to 148.0.7778.216. Skia is a high-performance

This vulnerability resides in the UI component of Google Chrome for Windows, manifesting as a classic Use-After-Free (UAF) weakness mapped

CVE-2026-9983 is a high-severity type confusion vulnerability discovered in Skia, the open-source 2D graphics library developed by Google and used

CVE-2026-9995 is a high-severity Use After Free (UAF) vulnerability found in the WebXR module of Google Chrome prior to version

CVE-2015-3246 is a race condition vulnerability discovered in the libuser library, a core system component that provides a standardized interface

CVE-2026-9996 is a high‑severity vulnerability affecting Google Chrome on macOS, specifically within the WebRTC (Web Real‑Time Communication) component. WebRTC is

CVE-2026-44701 is an HTML Injection vulnerability identified in OpenSTAManager, an open-source management software. The flaw resides within the application’s user

The vulnerability arises from multiple legacy PHP template files within LibreNMS that directly embed SNMP-sourced and syslog-sourced data into HTML

How CVE-2026-54614 Works CakePHP DebugKit is a popular debugging toolbar that provides developers with extended debugging tools for CakePHP applications.

kas is a setup tool for bitbake-based projects. Prior to version 5.4, a vulnerability existed in how the tool handles

In Kyverno v1.18.1, a tenant who can create a `NamespacedMutatingPolicy` in their own namespace can instruct the admission controller to

OpenWISP IPAM is a multi-tenant IP address management system where every Subnet belongs to an organization, and API access is

Starlette-Admin is a fast, beautiful, and extensible administrative interface framework for FastAPI and Starlette applications. Prior to version 0.16.1, the

The `pantheon-agents` PyPI package, a legitimate project maintained by the Aristoteleo organization, was compromised in June 2026 as part of

Budibase version 3.39.7 is vulnerable to an authorization bypass that allows low-privilege authenticated users to obtain arbitrary S3 pre-signed upload

IzPack’s `UnpackerBase.unpack()` resolves pack-file target paths without any canonical-path or directory-containment check. An attacker who distributes a trojanized installer JAR

LogTape is an unobtrusive logging library for JavaScript/TypeScript environments. The `@logtape/syslog` package provides a syslog sink that sends log messages

The vulnerability resides in Wasmtime’s native implementation of the WASIp1 specification, specifically within the `fd_renumber` function. WASIp1 defines a set

CVE-2026-54556 is a denial-of-service vulnerability in http4s, a Scala HTTP library, affecting servers that use the Ember backend with HTTP/2

The AsyncHttpClient (AHC) library, a popular asynchronous HTTP client for Java, is affected by a moderate-severity cookie injection vulnerability identified

CVE-2026-57031 details a flaw in Juniper Networks Junos OS on MX Series. The vulnerability lies in the packet forwarding engine

The vulnerability exists in the `service.js` file of the Sangfor aTrust component, specifically within the route handler app.get(‘/cgi-bin/temp/get’, …). This

IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in