### Impact
An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing any stream with a large amount of filters or multiple filters which pass around large amounts of data.
### Patches
This has been fixed in [pypdf==6.20.0](https://github.com/py-pdf/pypdf/releases/tag/6.20.0).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#4173](https://github.com/py-pdf/pypdf/pull/4173).
A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function readfile of the file download.php of the component File Download. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires an incomplete file which ends inside the xref table.
### Patches
This has been fixed in [pypdf==6.20.0](https://github.com/py-pdf/pypdf/releases/tag/6.20.0).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#4170](https://github.com/py-pdf/pypdf/pull/4170).
### Notes
This has been reported through both the secure channel and as a public issue at [#4169](https://github.com/py-pdf/pypdf/issues/4169).
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires removing an object from a tree, for example an outline item.
### Patches
This has been fixed in [pypdf==6.20.1](https://github.com/py-pdf/pypdf/releases/tag/6.20.1).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#4188](https://github.com/py-pdf/pypdf/pull/4188).
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_outline_item on a crafted PDF with a cyclic outline hierarchy can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1.
CVE-2026-114256 is a SQL injection vulnerability in the oretnom23 file-management-system-php affecting the Folder Management component's admin_class.php file. The vulnerability arises from improper handling of arguments such as name, parent_id, id, type, folder_id, and description in functions like save_folder, delete_folder, delete_file, file_rename, and save_files. This flaw allows remote attackers to execute SQL injection attacks. The project uses a rolling release strategy, so specific affected or fixed versions are not provided. The issue was reported early but has not yet received a response from the project. Public exploit code is available. The CVSS 4.0 base score is 6.9, indicating a medium severity.
A SQL injection vulnerability exists in the itsourcecode Sales-and-Inventory-System in the /pages/cust_del.php file via manipulation of the ID argument. The vulnerability allows remote attackers to execute SQL injection attacks. The product does not use versioning, so affected versions cannot be precisely identified. The issue was reported early to the project, but no response or fix has been provided yet. Public exploit details are available, but no known exploitation in the wild has been confirmed.
A vulnerability in the Linux kernel's BPF verifier logic for zero extension of 32-bit operations on s390 architecture was resolved. The issue stemmed from incorrect tracking of register upper half usage, potentially allowing arbitrary values in the upper half of registers. The fix replaces dynamic tracking with static analysis to correctly infer when zero extension is needed. No affected versions are explicitly stated.
A SQL injection vulnerability exists in the itsourcecode Sales-and-Inventory-System up to commit 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The flaw is in an unknown function within /pages/cust_searchfrm.php where manipulation of the ID argument can lead to injection. The vulnerability can be exploited remotely and public exploit code is available. The project uses a rolling release model, so specific affected versions are not provided. The vendor has not yet responded or issued a fix.
A SQL injection vulnerability exists in the itsourcecode Sales-and-Inventory-System affecting the /pages/cust_edit.php file through manipulation of the ID parameter. The vulnerability can be exploited remotely and has a CVSS score of 6.3. The project uses continuous delivery with rolling releases, so no specific affected or fixed versions are identified. The issue was reported early but has not yet been addressed by the project. Exploit code has been published, but no active exploitation in the wild is confirmed.
A critical vulnerability (CVE-2026-111832) exists in WP Mailster up to version 1.9.1.0 that allows unrestricted upload of files with dangerous types, including web shells, to a web server. This vulnerability enables remote attackers to execute arbitrary code with full system privileges without any authentication or user interaction.
A missing authorization vulnerability exists in BjornTech Swish for WooCommerce (woo-swish-e-commerce) up to version 3.7.8. This flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized information disclosure and modification. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.
A stack overflow vulnerability exists in the gf_bifs_dec_node function of GPAC Project's MP4Box before version 2.5. This flaw can be triggered by processing a specially crafted MP4 file, leading to a denial of service (DoS) condition.
A path traversal vulnerability (CWE-22) exists in Bold Grid weForms allowing attackers to access restricted directories. This affects versions up to and including 1.6.28. The vulnerability has a CVSS 3.1 score of 7.5, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts availability. No patch or remediation information is currently provided.
A stored cross-site scripting (XSS) vulnerability exists in Wasiliy Strecker Contest Gallery up to version 34.0.1. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to inject malicious scripts. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.
A reflected Cross-site Scripting (XSS) vulnerability exists in the ThemeHunk Customizer WordPress plugin up to version 2.8.7. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to execute arbitrary scripts in the context of a victim's browser session. The CVSS 3.1 base score is 7.1, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability.
A critical vulnerability (CVE-2026-111834) exists in Mang Board WP up to version 2.4.4 that allows unrestricted upload of files with dangerous types, enabling attackers to upload a web shell to the web server. This vulnerability can lead to complete compromise of confidentiality, integrity, and availability of the affected system.
A reflected Cross-site Scripting (XSS) vulnerability exists in Dylan Kuhn Geo Mashup plugin versions up to 1.13.22. This vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to execute arbitrary scripts in users' browsers. The vulnerability has a CVSS 3.1 score of 7.1, indicating high severity.
A reflected Cross-site Scripting (XSS) vulnerability exists in VideoWhisper.com Paid Videochat Turnkey Site (ppv-live-webcams) up to version 7.5.14. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to execute arbitrary scripts in a user's browser. The vulnerability has a CVSS 3.1 score of 7.1, indicating high severity with impacts on confidentiality, integrity, and availability. No patch or remediation information is provided in the available data.
A stored cross-site scripting (XSS) vulnerability exists in Brainstorm Force SureCart versions up to 4.9.5. This vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. The vulnerability has a high severity with a CVSS score of 7.1.