A vulnerability in Django versions 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18 allows an authenticated user with permission to submit a formset to delete database rows outside the formset's limiting queryset. This occurs because the save_existing_objects() method incorrectly trusts the presence of a primary key in submitted form data as proof that the object belongs to the queryset, enabling deletion of unauthorized objects when certain primary key types are used. Models with default AutoField primary keys are not affected.
tftp-hpa versions 5.4 up to but not including 6.0 contain an out-of-bounds read vulnerability in the rewrite_string() function within tftpd/remap.c. This flaw occurs during heap memory traversal for jump label searches. An unauthenticated remote attacker can exploit this by sending read or write requests with filenames matching a remap jump rule, causing the forked in.tftpd request handler to crash.
A heap-based buffer overflow vulnerability exists in lrzsz versions before 0.13.0 in the procheader() function of the lrz receive utility. This occurs when overlong sender-supplied filenames (up to 8192 bytes) are copied into a fixed-size buffer, leading to heap memory corruption and potential crashes. The flaw arises from unsafe use of sprintf() or strcpy() in pipe mode. The vulnerability has a medium severity score of 6.1 and requires user interaction for exploitation.
CVE-2026-105841 is an OS command injection vulnerability in lrzsz before version 0.13.0. The flaw exists in the lrz receive utility's pipe mode when run under suffixed names like lrztar. It allows remote senders to execute arbitrary commands by supplying crafted filenames that are passed unescaped to popen(). This vulnerability has a high severity rating with a CVSS score of 7.7.
CVE-2026-105840 is a path traversal vulnerability in the lrzsz utility before version 0.13.0. It affects the lrz receive utility's restricted mode, allowing attackers to write files outside the current directory by using absolute pathnames. The vulnerability arises because the pathname check only rejects '../' sequences unless built with a specific option, enabling malicious ZMODEM senders to overwrite any file writable by the receiving user.
libmikmod versions before 3.3.14 contain an integer overflow vulnerability in the Oktalyzer loader function OKT_doPBOD(). This flaw allows attackers to craft OKT module files with manipulated track counts that cause a heap buffer overflow. The vulnerability arises from a 16-bit track count value (numtrk) wrapping due to an overflow in the SLEN chunk, leading to out-of-bounds writes. Exploitation can result in application crashes or potential code execution.
libmikmod versions before 3.3.14 contain a heap out-of-bounds read vulnerability in the Impulse Tracker loader component. This flaw allows attackers to craft IT module files with more than 200 pattern rows, causing the function IT_ConvertTrack() to read beyond the allocated itpat buffer and potentially crash applications.
libmikmod versions before 3.3.14 contain an integer overflow vulnerability in the DSM_Load() function. This flaw allows attackers to craft DSM modules with manipulated track counts that cause a 16-bit integer wraparound, leading to a heap buffer overflow. Exploitation can result in application crashes or potentially arbitrary code execution.
A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file search_class.php. Such manipulation of the argument school_year leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
The FBI experienced a data breach exposing personal information of thousands of its employees due to a missed security patch on an Oracle PeopleSoft platform managed by an Accenture contractor. The breach was attributed to the ShinyHunters cybercrime group, which exploited the unpatched system to access sensitive data. The FBI removed the contractor responsible and took measures to mitigate further risk. The incident followed ShinyHunters' claim of hacking the FBI's job site to pressure the agency over a report about the group. Law enforcement has arrested alleged leaders of ShinyHunters in connection with the breach.
MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the intended target server hostname. An on-path attacker can therefore present a certificate that does not match the intended target hostname and spoof the server in a man-in-the-middle attack. The Schannel backend is not affected. This issue is fixed in versions 2.4.20, 2.5.11, and 2.6.1.
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in ufo/client/mcp/http_servers/mobile_mcp_server.py accepts a free-form key_code parameter and passes it to `adb shell input keyevent`. The adb client joins the arguments into a remote command string that the Android shell reparses, allowing an authenticated Mobile MCP caller to execute additional commands as the Android shell user on an authorized connected device. Exploitation requires a valid UFO_MCP_API_KEY, adb on the host, and a reachable authorized device, and it does not establish host operating-system execution, Android root execution, or access beyond the Android shell-user privileges. This issue is fixed in version 3.0.9.
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task_result/{task_name} endpoint calls SessionManager.get_result_by_task() in ufo/server/services/session_manager.py, which acquires a non-reentrant lock and then calls SessionManager.get_result() to acquire the same lock again when the task name maps to a session. An authenticated caller who knows or creates a mapped task name can therefore block the request indefinitely, and in the default single-process server configuration the blocked event-loop thread prevents other HTTP, WebSocket, and dependent background interactions. Unknown task names do not reach the nested call and are not affected. This issue is fixed in version 3.0.9.
CVE-2026-105791 is a command injection vulnerability in Microsoft UFO, an open-source automation framework. The flaw exists in the run_shell tool of the CommandLineExecutor component prior to version 3.0.9. It improperly validates only the first token of the bash_command parameter and allows explorer.exe to be used, which on Windows can delegate execution to arbitrary executables or scripts. Exploitation requires a user to run an affected agent workflow and trigger the vulnerable tool call. Successful exploitation can lead to arbitrary code execution with the privileges of the desktop user, potentially allowing access or modification of user files, tokens, and sessions. The issue is fixed in version 3.0.9.
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through /api/devices can supply a permitted attacker-controlled WebSocket endpoint while aip/transport/websocket.py applies pinned_addresses only to the initial destination. The pinned websockets.connect() client follows cross-origin redirects and opens a new TCP connection before Galaxy performs its post-handshake peer-IP validation, allowing WebSocket upgrade requests to internal hosts reachable from the server. The confirmed impact is the internal connection and handshake request, and does not establish arbitrary HTTP methods, response-body disclosure, a completed AIP session, or cloud metadata access. This issue is fixed in version 3.0.9.
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute_command tool in ufo/client/mcp/http_servers/linux_mcp_server.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output forms. An authenticated caller can use sort -o or the optional second uniq operand to create or overwrite files writable by the UFO server process without shell metacharacters, because the allowed binary opens the destination itself and the argument policy does not reject the operation. This can corrupt configuration or other writable data and disrupt the service, but the demonstrated primitive does not directly disclose files or establish arbitrary code execution. This issue is fixed in version 3.0.9.
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type_text and launch_app tools in ufo/client/mcp/http_servers/mobile_mcp_server.py pass the authenticated caller-controlled text and package_name parameters into adb shell command argument positions without comprehensive validation. The adb client joins those arguments into a remote command string that the Android shell reparses, allowing shell metacharacters to execute additional commands on an authorized connected device as the Android shell user. Exploitation requires a valid Mobile MCP API key and a reachable device authorized for ADB, and it does not establish host operating-system execution, Android root execution, or access beyond the Android shell-user privileges. This issue is fixed in version 3.0.10.
Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to inject completed LOCAL_DISK replicas through the NotifyOffloadSuccess RPC. Attackers can mount a local disk segment with a self-chosen client UUID, then attach replicas pointing at attacker-controlled endpoints to serve poisoned disk-tier reads and fake key existence.
Mooncake Store versions up to 0.3.13.post1 have a missing authorization vulnerability that allows unauthenticated attackers to delete disk replicas of objects. This can be exploited via the EvictDiskReplica and BatchEvictDiskReplica functions by accessing the coro_rpc master port, potentially deleting objects whose only remaining replica is on disk.