exploit

The Trix editor prior to version 2.1.17 is vulnerable to a stored cross-site scripting (XSS) attack due to improper sanitization

CVE-2026-28710 is a high-severity vulnerability residing in Acronis Cyber Protect 17, impacting both Linux and Windows platforms prior to build

CVE-2025-66292 is an arbitrary file deletion vulnerability found in DPanel, an open-source server management panel written in Go, affecting versions

CVE-2026-25962 is a vulnerability in MarkUs, a web application used for submitting and grading student assignments. The issue resides in

The `parse_options_header()` function in `multipart.py` versions up to `1.3.0` contains a regular expression with an ambiguous alternation . When parsing

CVE-2025-30411 is a critical vulnerability residing in Acronis Cyber Protect versions 15 and 16 due to improper authentication (CWE-1390) .

CVE-2026-31817 details a high-severity path traversal vulnerability in OliveTin, a web interface for running predefined shell commands. The flaw resides

The vulnerability arises from inconsistent authorization logic between the Dashboard API and the REST API in StudioCMS. The Dashboard API

The vulnerability resides in Kora’s `verify_token_payment()` function, which validates whether a user has paid sufficient transaction fees using an SPL

CVE-2025-30416 is a critical vulnerability affecting Acronis Cyber Protect 15 and 16 on Linux and Windows platforms . It is

The vulnerability arises because the email channel authorizes senders solely based on the `From` header parsed from incoming emails. The

The vulnerability exists because the `isAuthorized()` function in the S3 storage manager is declared async, meaning it returns a Promise<boolean>.

The vulnerability, identified as CVE-2026-32237, resides in the `@backstage/plugin-scaffolder-backend` and allows authenticated users with permission to execute software template “dry-runs”

In specific LINE configurations, a vulnerability exists where sender IDs approved through Direct Message (DM) pairing could also inadvertently satisfy

The vulnerability allows an authenticated attacker with both read and write permissions to upload a malicious file named .prologue.html. When

The vulnerability resides in the `acceptDataAttrs` function within Unhead’s `safe.ts` (lines 16-20). This function is designed to filter attributes for

The vulnerability resides in the `/api/network/forwardProxy` endpoint of SiYuan, which allows authenticated users to make arbitrary HTTP requests from the

The vulnerability resides in OpenClaw’s `system.run` approval mechanism, which fails to bind the content of mutable interpreter-style script files (like

CVE-2026-29771 is a high-severity vulnerability affecting the Netmaker server, a platform for creating virtual overlay networks with WireGuard. The issue

The vulnerability, identified as CVE-2026-30226, resides in the `devalue.parse` and `devalue.unflatten` functions of the devalue library versions 5.6.3 and earlier

The vulnerability resides in OpenClaw’s Slack event handlers for system events like message_changed, message_deleted, and thread_broadcast, specifically within the files

This vulnerability is an HTTP Host header attack, classified under CWE-644, which affects the PcVue WebClient and WebScheduler web applications

The vulnerability stems from the `typeSafetyCheckEmail()` function in service/internal/executor/arguments.go, which calls `log.Errorf()` on every invocation, regardless of whether the email

The vulnerability resides in how OpenClaw’s workspace-only path validation handles symlinks. When an in-workspace symlink points outside the workspace to

CVE-2026-1697 describes a vulnerability in PcVue versions 12.0.0 through 16.3.3, where the Secure and SameSite attributes are missing in the

The vulnerability, identified as CVE-2026-30929, resides in the `MagnifyImage` function within ImageMagick, a popular open-source software suite for image manipulation.

Tornado is vulnerable to a high-severity Denial-of-Service (DoS) attack due to improper handling of multipart/form-data payloads . In software versions

CVE-2026-30956 details an authorization bypass vulnerability in OneUptime versions prior to 10.0.21 . The flaw resides in how the application

CVE-2026-2836 is a cache poisoning vulnerability in the Pingora HTTP proxy framework caused by an insecure default cache key construction.

CVE-2026-1693 details a vulnerability in ARC Informatique’s PcVue product, specifically affecting versions 12.0.0 through 16.3.3. The core issue is the

The vulnerability arises from a discrepancy in how the `server-http` gateway and backend plugin handlers process HTTP request paths. The

CVE-2026-1695 is a Cross-Site Scripting (XSS) vulnerability residing in the OAuth web services component of ARC Informatique’s PcVue software, specifically

When an OAuth2 bearer token is used for an HTTP or HTTPS transfer and curl follows a redirect to a

The vulnerability, identified as CVE-2026-30958, resides in OneUptime versions prior to 10.0.21. It is an unauthenticated path traversal flaw located

The vulnerability, assigned CVE-2025-58753, is a missing permission check in the Copyparty file server’s sharing feature (shr global-option) . It

CVE-2026-29195 is an incorrect authorization vulnerability in the user update handler of Netmaker, a platform for creating virtual private networks

libcurl maintains a pool of network connections to reuse for subsequent requests, avoiding the overhead of creating new connections. When

The vulnerability, identified as CVE-2026-26284, exists in the `BilateralBlurImage` function of ImageMagick . It is a heap buffer over-read caused

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into

The vulnerability arises from the default configuration of Microsoft IIS and ASP.NET, which automatically add specific HTTP headers to web

The vulnerability, identified as CVE-2026-30931, is a heap-based buffer overflow found in the UHDR encoder of ImageMagick. The issue stems

The ha-mcp OAuth consent form, a beta feature, accepts a user-supplied `ha_url` and makes an unvalidated server-side HTTP request to

The vulnerability resides in OliveTin’s live EventStream feature, which broadcasts real-time updates about action executions to all authenticated users currently

CVE-2026-3483 is a high-severity vulnerability in Ivanti Desktop and Server Management (DSM) that allows local authenticated attackers to escalate their

The vulnerability resides in the Microsoft Teams plugin’s message handler logic. When a system administrator configures a route allowlist for

The vulnerability stems from a flaw in libcurl’s connection reuse logic when communicating with HTTP proxies that require authentication. When

CVE-2026-30957 is a critical vulnerability in OneUptime versions prior to 10.0.21. The issue lies in the Synthetic Monitors feature, where

A heap buffer overflow vulnerability exists in ImageMagick’s WriteXWDImage function, specifically due to a 32-bit unsigned integer overflow in the

How This CVE Works OneUptime versions before 10.0.20 contain a critical Remote Code Execution vulnerability in their Synthetic Monitors feature

The vulnerability resides in Nuxt’s `useHeadSafe` utility, specifically within the `makeTagSafe` function in `safe.ts` (lines 68-71). This function is designed

The vulnerability, identified as CVE-2026-30959, resides in the `resend-verification-code` endpoint of OneUptime, an open-source observability platform . The core issue

The vulnerability, identified in OpenClaw versions up to 2026.2.25, is a sandbox bypass caused by improper validation of symbolic links

The ha-mcp OAuth consent form prior to version 7.0.0 renders user-controlled parameters using Python f-strings without HTML escaping, creating a

The vulnerability resides in the skill installation process of OpenClaw versions up to 2026.3.7. The installer validates the intended per-skill

Parse Server versions prior to 8.6.35 and 9.6.0-alpha.9 contain a vulnerability in the LiveQuery feature . The issue arises because

How CVE-2026-1692 Works This vulnerability stems from a missing origin validation in WebSockets, specifically affecting the GraphicalData web services of

CVE-2026-1696 is a vulnerability in arcinfo PcVue’s web server components (WebVue, WebScheduler, TouchVue, SnapVue) where specific HTTP security headers are

The vulnerability exists in the `WaveletDenoiseImage` method, which is called when ImageMagick processes an image with the `-wavelet-denoise` command-line option.

A heap buffer overflow vulnerability exists in ImageMagick’s `ReadYUVImage()` function within `coders/yuv.c` when processing maliciously crafted YUV 4:2:2 images with

A signed integer overflow vulnerability, identified as CVE-2026-25970, exists in ImageMagick’s SIXEL decoder, specifically affecting versions prior to 7.1.2-15 and

The vulnerability, identified as CVE-2026-25982, is a heap out-of-bounds read flaw found in ImageMagick’s DICOM decoder within `coders/dcm.c` . It

A stack buffer overflow vulnerability, identified as CVE-2026-25968, exists in ImageMagick’s handling of Magick Scripting Language (MSL) files . The

ImageMagick fails to check for circular references between two Magick Scripting Language (MSL) files . When a specially crafted MSL

CVE-2026-28442 is a high-severity vulnerability in ZimaOS version 1.5.2-beta3, a fork of CasaOS designed for Zima devices and x86-64 systems

CVE-2026-27275 is a critical vulnerability affecting Adobe Substance 3D Stager versions 3.1.7 and earlier. It is an out-of-bounds write issue,

CVE-2026-27269 is an out-of-bounds read vulnerability affecting Adobe Premiere Pro versions 25.5 and earlier. The flaw exists in how the

CVE-2026-1427 is an OS Command Injection vulnerability found in the Single Sign-On Portal System developed by WellChoose . This security

CVE-2026-30832 details a critical Server-Side Request Forgery (SSRF) vulnerability in Charmbracelet’s Soft Serve, a self-hostable Git server . The flaw

The HTTP service in Tapo C220 v1 and C520WS v2 cameras fails to safely handle POST requests with an excessively

Values passed to the domain, path, and `samesite` arguments of `RequestHandler.set_cookie` were not completely validated in versions of Tornado prior

The vulnerability resides in mchange-commons-java, a utility library often used with the c3p0 connection pool. The library contains an independent

CVE-2026-29786 is a high-severity vulnerability in the `node-tar` library, a package used for creating and extracting Tar archives in Node.js

The HTTP parser in Tapo C220 v1 and C520WS v2 cameras contains a flaw in its error-handling logic. When the

CVE-2025-9520 is an Insecure Direct Object Reference (IDOR) vulnerability found in Omada Controllers . It resides in the software’s authorization

The vulnerability, CVE-2026-27900, resides in how the Terraform Provider for Linode handled debug logging prior to version 3.9.0 . The

CVE-2026-27821 is a high-severity vulnerability found in GPAC, an open-source multimedia framework . The flaw is a stack-based buffer overflow

The vulnerability in CVE-2026-29787 resides within the mcp-memory-service, an open-source memory backend for multi-agent systems . Prior to version 10.21.0,

CVE-2026-1429 is a reflected cross-site scripting vulnerability found in the Single Sign-On Portal System developed by WellChoose . The vulnerability

The vulnerability, known as a Zip Slip attack, exists in the `jaraco.context.tarball()` function from version 5.2.0 up to, but not

The vulnerability stems from a design flaw in the configuration export within uptime.config.ts. This file exported two objects: `pageConfig` (intended

CVE-2025-9522 is a Blind Server-Side Request Forgery (SSRF) vulnerability affecting TP-Link Omada Controllers . The flaw resides specifically within the

The Single Sign-On Portal System developed by WellChoose contains an OS Command Injection vulnerability, identified as CVE-2026-1428 and classified under

The vulnerability in pyLoad, identified as CVE-2026-29778, resides in the `edit_package()` function found within the `json_blueprint.py` file. This function handles

CVE-2025-9521 is a vulnerability in TP-Link Omada Controllers that allows an attacker with a valid session token to bypass the

The vulnerability, designated CVE-2026-1315, resides in the firmware update mechanism of TP-Link Tapo C220 v1 and C520WS v2 cameras .

CVE-2026-29781 is a vulnerability in the Sliver command and control framework that resides in the Protobuf unmarshalling logic . The

On March 3, 2026, an attacker used compromised credentials to create pull requests injecting obfuscated shell code into the `xygeni/xygeni-action`

The vulnerability, identified in n8n workflow automation platform versions from 0.211.0 up to, but not including, 1.120.4, 1.121.1, and 1.122.0,

The vulnerability resides in how Sylius handles HTTP redirects. Three specific components—CurrencySwitchController::switchAction(), ImpersonateUserController::impersonateAction(), and StorageBasedLocaleSwitcher::handle()—trust the HTTP Referer header without

CVE-2026-31809 describes a reflected Cross-site Scripting (XSS) vulnerability in SiYuan versions prior to 3.5.10 due to an improper sanitization of

CVE-2026-27273 is a high-severity vulnerability affecting Adobe Substance 3D Stager versions 3.1.7 and earlier . The flaw is classified as

CVE-2026-27219 is an Out-of-bounds Read vulnerability affecting Adobe Substance 3D Painter versions 11.1.2 and earlier. The flaw resides in how

A critical SQL injection vulnerability, identified as CVE-2026-31871, exists in Parse Server versions prior to 8.6.31 and 9.6.0-alpha.5 when using

The vulnerability stemmed from incorrect state handling during nested EVM execution paths involving the ICS20 precompile . Under specific execution

The vulnerability, identified as CVE-2026-31833, is a stored cross-site scripting (XSS) issue found in Umbraco CMS versions 16.2.0 up to

The vulnerability arises from how Parse Server handles dot-notation in query `WHERE` clauses and `sort` parameters when class-level permissions (CLPs)

The vulnerability exists in the Argo Workflows server endpoints for WorkflowTemplates and ClusterWorkflowTemplates. The server lacks proper authorization checks on

The vulnerability, identified as CVE-2021-32711, resides in the Store-API of Shopware platforms, specifically within the `store-api.order` endpoint which utilizes a

The league/commonmark library, a PHP Markdown parser, prior to version 2.8.1 contains a vulnerability in its DisallowedRawHtml extension. This extension

The vulnerability in Quill before version v0.7.1 stems from insufficient validation of size fields when parsing Mach-O binaries. Specifically, during