Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 730 | 0,2 % |
| ≥50 % | 3.215 | 0,9 % |
| ≥10 % | 22.093 | 5,9 % |
| <10 % | 347.847 | 93,0 % |
CVE-2026-115418 – SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)
Bulletin ID: 2026-151-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/26/2026 09:30 AM PDT Description: The AWS Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha module provides experimental constructs
CVE-2025-10277 | YunaiV yudao-cloud up to 2025.09 /crm/receivable/submit id improper authorization (EUVD-2025-29003)
A vulnerability categorized as critical has been discovered in YunaiV yudao-cloud up to 2025.09. This issue affects some unknown processing of the file /crm/receivable/submit. The manipulation of the argument ID results in improper authoriz
CVE-2026-5147 | YunaiV yudao-cloud up to 2026.01 get-by-website sql injection
A vulnerability categorized as critical has been discovered in YunaiV yudao-cloud up to 2026.01. This affects an unknown part of the file /admin-api/system/tenant/get-by-website. The manipulation of the argument Website results in sql injec
Kritische Sicherheitslücke bedroht Gitlab-Server - SwissCybersecurity.net
... Oktober 2026. Main Navigation Cybersecurity. News · Wissen · Security-Blog · Specials · IT-Markt. Schlüsselwörter. Webcode. News. Schwachstelle in ... Weiterlesen
PHP Releases New Windows Build Security Updates to Fix Critical HTTP2Shell Vulnerability
The PHP team has released updated Windows builds to fix a serious flaw known as HTTP2Shell. The new packages are PHP 8.5.12-1, 8.4.27-1, 8.3.36-1, and 8.2.35-1, and PHP announced them on October 26, 2026. Each build now includes Brotli 1.2.
USN-8955-1: nginx vulnerabilities
It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service, or exe
CVE-2026-79780 | Rclone up to 1.74.x S3 Redirect Callbacks cross-domain policy (WID-SEC-2026-2623)
A vulnerability was found in Rclone up to 1.74.x. It has been rated as problematic. This vulnerability affects unknown code of the component S3 Redirect Callbacks. This manipulation causes permissive cross-domain policy with untrusted domai
CVE-2026-79779 | Rclone up to 1.74.x Redirect missing encryption (WID-SEC-2026-2623)
A vulnerability was found in Rclone up to 1.74.x. It has been declared as problematic. This affects an unknown part of the component Redirect Handler. The manipulation results in missing encryption of sensitive data. This vulnerability is k
CVE-2026-79778 | Rclone up to 1.74.x WebDAV TUS Creation null pointer dereference (WID-SEC-2026-2623)
A vulnerability was found in Rclone up to 1.74.x and classified as problematic. This vulnerability affects unknown code of the component WebDAV TUS Creation Handler. The manipulation results in null pointer dereference. This vulnerability i
CVE-2026-79777 | Rclone up to 1.74.x RC API information disclosure (WID-SEC-2026-2623)
A vulnerability has been found in Rclone up to 1.74.x and classified as problematic. This affects an unknown part of the component RC API. The manipulation leads to information disclosure. This vulnerability is documented as CVE-2026-79777.
CVE-2026-79776 | rclone up to 1.74.x pprof debug handler improper authentication (WID-SEC-2026-2623)
A vulnerability, which was classified as problematic, was found in rclone up to 1.74.x. Affected by this issue is some unknown functionality of the component pprof debug handler. Executing a manipulation can lead to improper authentication.
CVE-2026-105134 | Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44 Replication Receiver UpdateReceivers.do Random os command injection (EUVD-2026-92078)
A vulnerability classified as very critical was found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manip
CVE-2026-105133 | Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44 API ApiStructsAction.java checkSysPwd Random improper authentication (EUVD-2026-92079)
A vulnerability classified as critical has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of
CVE-2026-112880 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in hackney_http_connect in benoitc hackney allows HTTP Request Splitting via the value a proxy_auth_fun callback returns. After a 407 response from an HTTP CONNECT proxy, hackney_http_connect:handle_proxy_auth/11 calls the caller's proxy_auth_fun with the status code and the response headers and writes the returned binary into the Proxy-Authorization l
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in hackney_http_connect in benoitc hackney allows HTTP Request Splitting via the value a proxy_auth_fun callback returns. After a 40
CVE-2026-110475 | This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a valid authenticated session on the targeted system. Successful exploitation of this vulnerability could allow the attacker to enumerate platform users, establish sessi
This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating
CVE-2026-110474 | This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which could lead to make arbitrary API calls to retrieve call transcripts and recordings through the application API of the targeted system.
This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading clien
CVE-2026-107656 | An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox Paa
CVE-2026-107157 | Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework.
Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework.
CVE-2026-107092 | NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.
NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.
CVE-2026-112346 | OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in th
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an
CVE-2026-80465 | Siemens Mendix SAML improper authentication (EUVD-2026-70411)
A vulnerability classified as critical was found in Siemens Mendix SAML. This affects an unknown function of the component SAML. Such manipulation leads to improper authentication. This vulnerability is traded as CVE-2026-80465. The attack
CVE-2026-115450 | MarcosCamara01 Ecommerce Template Checkout Flow /api/user/cart variantId/stripeId external control of assumed-immutable web parameter (EUVD-2026-108212)
A vulnerability classified as problematic has been found in MarcosCamara01 Ecommerce Template. This issue affects some unknown processing of the file /api/user/cart of the component Checkout Flow. Performing a manipulation of the argument v
CVE-2026-115453 | MarcosCamara01 Ecommerce Template Cart Repository/Wishlist Repository repositories authorization (EUVD-2026-108213)
A vulnerability marked as problematic has been reported in MarcosCamara01 Ecommerce Template. This affects the function cartRepository.delete/cartRepository.updateQuantityInternal/wishlistRepository.delete of the file src/lib/db/drizzle/rep
CVE-2026-116367 | A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possib
CVE-2026-79775 | rclone up to 1.74.4 SquashFS parser denial of service (WID-SEC-2026-2623)
A vulnerability labeled as problematic has been found in rclone up to 1.74.4. The affected element is an unknown function of the component SquashFS parser. Executing a manipulation can lead to denial of service. The identification of this v
CVE-2026-93987 | rclone up to 1.75.0 Docker Volume Plugin volume.go newVolume name path traversal (Nessus ID 348340 / WID-SEC-2026-3196)
A vulnerability classified as problematic has been found in rclone up to 1.75.0. Affected is the function newVolume of the file cmd/serve/docker/volume.go of the component Docker Volume Plugin. The manipulation of the argument Name leads to
CVE-2026-93986 | Rclone up to 1.75.0 Local Backend path traversal (Nessus ID 348337 / WID-SEC-2026-3196)
A vulnerability classified as problematic was found in Rclone up to 1.75.0. Affected by this vulnerability is an unknown functionality of the component Local Backend. The manipulation results in path traversal. This vulnerability is identif
CVE-2026-78162 | Apache Camel up to 4.18.4/4.22.0 camel-hazelcast doStart/getOrCreateHzClientInstance deserialization (WID-SEC-2026-4006)
A vulnerability described as critical has been identified in Apache Camel up to 4.18.4/4.22.0. The impacted element is the function doStart/getOrCreateHzClientInstance of the component camel-hazelcast. Executing a manipulation can lead to d
Keycloak CVE-2026-18963 härten: 12 Schritte, 90 Min [2026] - shattered.io
Weitere Beiträge zu Schwachstellen, Vorfällen und Gegenmaßnahmen sammelt die Rubrik Cybersicherheit. Meldepflichten und Nachweis in DACH. Ergibt ... Weiterlesen
CVE-2026-115748 | **UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber) server library. Its XEP-0077 (In-Band Registration) implementation is missing an authentication check, allowing any authenticated user to compromise other accounts. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative.
**UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber) server library. Its XEP-0077 (In-Band Registration) implementation is missing an authentication check, allowing any au
CVE-2026-115721 | **UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of memory condition. This issue affects all versions of Apache Vysper. Apache Vysper is an XMPP (Jabber) server library. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative.
**UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of memory condition. This issue affects all versions of Apache Vysper. Apache Vysper is an XMPP (Jabber) server librar
CVE-2026-116544 | Open5GS 2.6.1 through 2.8.0 contains an out-of-bounds read vulnerability in parse_scheme_output() in lib/sbi/conv.c during SUCI de-concealment due to incomplete length validation. Remote unauthenticated UEs or SBI peers can submit a crafted SUCI with a 42-byte scheme output to a UDM, triggering a heap over-read past the buffer.
Open5GS 2.6.1 through 2.8.0 contains an out-of-bounds read vulnerability in parse_scheme_output() in lib/sbi/conv.c during SUCI de-concealment due to incomplete length validation. Remote unauthenticated UEs or SBI peers can submit a crafted
CVE-2026-116543 | Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse_multipart() that allows unauthenticated attackers to corrupt memory by supplying an empty multipart boundary. Attackers can send a single crafted multipart/related request to the SBI interface of any network function, overflowing the lookbehind buffer and crashing it.
Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse_multipart() that allows unauthenticated attackers to corrupt memory by supplying an empty multipart boundary. Attackers can send a single crafted multipa
CVE-2026-116542 | Netty netty-tcnative before 2.0.84.Final contains an SNI hostname spoofing vulnerability that allows remote unauthenticated clients to alter hostnames via JNI NewStringUTF decoding. Attackers can send overlong encodings like 0xC0 0x80 in the ClientHello server_name to confuse SNI-based certificate selection, access decisions, and logging.
Netty netty-tcnative before 2.0.84.Final contains an SNI hostname spoofing vulnerability that allows remote unauthenticated clients to alter hostnames via JNI NewStringUTF decoding. Attackers can send overlong encodings like 0xC0 0x80 in th
CVE-2026-116541 | Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn_write_to_bytebuffer BIO write callback that overreports bytes consumed. Remote TLS 1.3 peers can provoke queued post-handshake records like NewSessionTicket or KeyUpdate to truncate flights, fail connections, or abort the JVM process.
Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn_write_to_bytebuffer BIO write callback that overreports bytes consumed. Remote TLS 1.3 peers can provoke queued post-handshake records like NewSe
CVE-2026-116540 | netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed HMAC keys, crashing or corrupting ticket processing.
netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicke
CVE-2026-116539 | Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_write_to_bytebuffer BIO callback caused by failing to wrap the non-application ring buffer write index. Remote TLS peers can drive handshake, renegotiation, or post-handshake messages into this buffer, triggering an out-of-bounds memcpy that crashes the JVM process.
Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_write_to_bytebuffer BIO callback caused by failing to wrap the non-application ring buffer write index. Remote TLS peers can drive handshake,
CVE-2026-116538 | HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta contains a cross-site scripting vulnerability because SanitizeDom(string) never sanitizes attributes on the html and body wrapper elements. Attackers can supply input with a second body or html tag carrying event handlers like onload, executing script when applications render serialized document or body outer HTML.
HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta contains a cross-site scripting vulnerability because SanitizeDom(string) never sanitizes attributes on the html and body wrapper elements. Attackers can supply input
CVE-2026-116489 | Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users to corrupt memory by shadowing pgvector's vector type or operators. Attackers with CREATE privilege on the vectorscale schema can pre-create shadow objects, then build and query DiskANN indexes over crafted values to cause out-of-bounds reads and writes, disclosing memory, crashing the server, or escalating privileges.
Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users to corrupt memory by shadowing pgvector's vector type or operators. Attackers with CREATE privilege on the vectorscale sc
CVE-2026-116370 | 2K Games Sid Meier's Civilization IV 1.0.12.68 Lua sandbox loadstring type confusion
A vulnerability was found in 2K Games Sid Meier's Civilization IV 1.0.12.68. It has been classified as critical. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type co
CVE-2026-85297 | Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MC
PHP warnt vor dritter PHP2Shell-Schwachstelle und verschiebt den Notfix
LONDON (IT BOLTWISE) – PHP meldet mit CVE-2026-115560 eine dritte PHP2Shell-Schwachstelle, bei der ein Notfix diesmal nicht sofort kommt. Der neue Angriff erfordert eine ungewöhnliche Kombination aus Session-Einstellungen und Anwendungslogi
CVE-2026-108391 | mobile-next mobile-mcp up to 0.0.51 Auth Middleware app.listen missing authentication (GHSA-7fcv-4hr6-54fw)
A vulnerability, which was classified as critical, has been found in mobile-next mobile-mcp up to 0.0.51. The affected element is the function app.listen of the component Auth Middleware. Performing a manipulation results in missing authent
PHP2Shell: What to know about two critical PHP flaws
YouTube VideoLast week, details emerged about a pair of critical vulnerabilities in PHP, a server-side scripting language commonly used in web development. The news prompted security advisories from government agencies and sent website owne
[NEU] [mittel] Microsoft .NET und ASP.NET: Schwachstelle ermöglicht Privilegieneskalation
Ein lokaler Angreifer kann eine Schwachstelle in Microsoft .NET und Microsoft ASP.NET ausnutzen, um die höchsten Berechtigungen auf dem System zu erlangen. Weiterlesen
[NEU] [mittel] Redis: Schwachstelle ermöglicht nicht spezifizierten Angriff
Ein Angreifer kann eine Schwachstelle in Redis ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen. Weiterlesen
[NEU] [hoch] Samba: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Samba ausnutzen, um Sicherheitsvorkehrungen zu umgehen. Weiterlesen
CVE-2026-110314 | Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection handling of mtrudel bandit allows a remote client to keep running WebSock handler code after the server has stopped its connection, via data frames sent after ignoring the server's Close frame. When a WebSock callback returns {:stop, ...}, Bandit.WebSocket.Connection calls terminate/2, sends Close and shuts down the write side, but keeps the connection process running
Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection handling of mtrudel bandit allows a remote client to keep running WebSock handler code after the server has stopped its connection, via data frames se
[UPDATE] [mittel] Eclipse Jetty: Schwachstelle ermöglicht Denial of Service
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Eclipse Jetty ausnutzen, um einen Denial of Service Angriff durchzuführen. Weiterlesen
[UPDATE] [mittel] Pivotal Spring Framework: Schwachstelle ermöglicht Denial of Service
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Pivotal Spring Framework ausnutzen, um einen Denial of Service Angriff durchzuführen. Weiterlesen
[NEU] [hoch] Oracle Java SE: Schwachstelle ermöglicht Offenlegung von Informationen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Oracle Java SE ausnutzen, um Informationen offenzulegen oder Daten zu manipulieren. Weiterlesen
[NEU] [mittel] MongoDB Compass: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MongoDB Compass ausnutzen, um Sicherheitsvorkehrungen zu umgehen. Weiterlesen
[NEU] [mittel] MLflow: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MLflow ausnutzen, um Sicherheitsvorkehrungen zu umgehen. Weiterlesen
[NEU] [niedrig] VLC für Android: Schwachstelle ermöglicht Manipulation von Dateien
Ein lokaler Angreifer kann eine Schwachstelle in VLC ausnutzen, um Dateien zu manipulieren. Weiterlesen
[NEU] [hoch] PHP: Schwachstelle ermöglicht Codeausführung
Ein Angreifer kann eine Schwachstelle in PHP ausnutzen, um beliebigen Programmcode auszuführen. Weiterlesen
CVE-2026-115720 | Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the assert_not_private_url() guard validates only the initial hostname before callers invoke requests.get(url) with default redirect-following and no IP pinning, allowing an attacker-supplied public URL to HTTP-redirect to internal or link-local addresses the guard never validated. An authenticated attacker can call the convert_to_webp endpoint, which la
Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the assert_not_private_url() guard validates only the initial hostname before callers invoke requests.get(url) with default redirect-f
CVE-2026-116263 | A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the function architect of the file src/inc/core.php of the component File Upload. This manipulation causes race condition. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit has been published and may be used. Upgrading to version 3.7.2 is sufficient to resolve this issue. Patch name: 6
A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the function architect of the file src/inc/core.php of the component File Upload. This manipulation causes race condition. The attack can be initiated
CVE-2026-105947 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120
CVE-2026-116262 | A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function webinspector_receive_with_timeout of the file src/webinspector.c of the component Web Inspector. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function webinspector_receive_with_timeout of the file src/webinspector.c of the component Web Inspector. The manipulation results in heap-based buffe
CVE-2026-115717 | Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability in the convert_to_webp API endpoint, which lacks the has_page_write access control applied to similar asset-ingest handlers and performs an unprotected requests.get call that follows redirects without re-validating resolved IP addresses. A low-privilege authenticated user can supply an image_url pointing to an internal address or use DNS rebinding and open redirects to
Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability in the convert_to_webp API endpoint, which lacks the has_page_write access control applied to similar asset-ingest handlers and performs an unprotecte