CVE-2026-113363 is a critical vulnerability in NEC Corporation WebSAM WinShare versions 7.2.0 through 7.5.0, 7.6.0, and 7.7.0 through 7.7.2 on Windows. It involves improper input validation in network communication processing, allowing a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges by sending a crafted network packet to the affected system.
OffSeq Mirage honeypot sensors detected an attacker URL used in the wild on 2026-11-09. The URL was observed twice and is associated with the MITRE ATT&CK technique T1105 (Ingress Tool Transfer). The attacker infrastructure was identified as being located in Hong Kong. This URL is linked to attacker payloads such as tool downloads, callbacks, or exploitation targets. Organizations are advised to block and monitor this URL and search their proxy, web, or WAF logs for any requests to it.
CVE-2026-113362 is a high-severity vulnerability in NEC Corporation WebSAM WinShare affecting versions 7.5.0 and earlier (excluding 7.3.3), 7.6.0, and 7.7.0 through 7.7.1 on Windows. It involves improper access control on the program installation folder, allowing a locally authenticated low-privileged attacker to execute arbitrary code with SYSTEM privileges by placing a crafted DLL that is loaded by a SYSTEM-level process.
CVE-2026-124564 is a path traversal vulnerability in the D-Link DIR-878 router firmware version 1.20B05. The flaw exists in the GetListDirectory function of the bin/prog.cgi file within the HNAP Handler component. This vulnerability allows remote attackers to manipulate the ListDirectoryPath argument to traverse directories on the device. The affected product is no longer supported by the vendor. Public exploit code is available, but no active exploitation in the wild has been reported.
Multiple security vulnerabilities affecting Node.js and its dependencies in Red Hat Enterprise Linux 10 have been addressed in an important security update. These include denial of service issues via uncontrolled recursion and stack exhaustion in brace-expansion, denial of service via unhandled stream errors and TLS renegotiation in undici, certificate validation bypass, cache poisoning, TLS certificate hostname bypass, and DNS hostname truncation vulnerabilities. The update fixes these issues to improve the security posture of Node.js runtime and related libraries.
CVE-2026-124563 is a high-severity buffer overflow vulnerability in the D-Link DIR-878 router, specifically in version 1.20B05. The flaw exists in the SetWanSettings function of the HNAP Handler component and can be triggered remotely by manipulating the Primary or Secondary argument. Exploit code has been publicly released. The affected product is no longer supported by the vendor.
A security update for Squid 4, a high-performance proxy caching server, addresses a vulnerability identified as CVE-2026-61642. This flaw involves HTTP request smuggling via the Transfer-Encoding header. Red Hat has issued an important security advisory for Red Hat Enterprise Linux 8, providing updated packages to fix this issue. The advisory includes detailed instructions for applying the update. No CVSS score is provided in the advisory, but the severity is rated as important by Red Hat Product Security.
A security update for webkit2gtk3 addresses multiple vulnerabilities in the Skia graphics library used by chromium-browser within WebKitGTK. These include information leaks, use-after-free, cross-origin data disclosure, uninitialized resource usage, integer overflow, out-of-bounds reads, memory corruption, and improper input validation. The update is rated as important by Red Hat and affects Red Hat Enterprise Linux 8 variants. The advisory references numerous CVEs detailing these issues.
A security vulnerability (CVE-2025-12385) exists in the Qt5 QtDeclarative component affecting Red Hat Enterprise Linux 8. The issue involves improper validation of the <img> tag size in the Text component parser. Red Hat has issued an important security update to address this flaw. The vulnerability is rated with high severity by the source, though no CVSS score is provided. The update is available for multiple Red Hat Enterprise Linux 8 variants and related CodeReady Linux Builder products. Users are advised to apply the update as detailed in the Red Hat advisory.
Multiple security vulnerabilities have been identified in the Data Plane Development Kit (dpdk) packages used in Red Hat Enterprise Linux 8. These include memory size validation issues, heap overflows, use-after-free, type confusion, out-of-bounds writes, infinite loops, and buffer overflows affecting various components such as vhost, vhost-crypto, and the nfp vDPA driver. The vulnerabilities could allow a guest to cause host memory corruption and other unsafe conditions. Red Hat has released security updates addressing these issues.
A path traversal vulnerability exists in OtterMind Chat2DB up to version 5.3.8, specifically in the DbMybatisGenerateServiceImpl.generateClass function. This flaw allows remote attackers to manipulate the tableName argument to perform unauthorized path traversal. Public exploit code is available, and the vendor has not responded to disclosure attempts. The vulnerability has a high severity rating with a CVSS score of 7.3.
A security vulnerability in kekingcn kkFileView up to version 5.0.3 allows remote attackers to perform an open redirect via manipulation of the X-Base-Url HTTP header in the BaseUrlFilter.getBaseUrl function. The vulnerability has a medium severity with a CVSS score of 4.3. Public exploit code has been disclosed, but no official vendor response or patch is currently available.
A server-side request forgery (SSRF) vulnerability exists in DataLinkDC Dinky up to version 1.2.5 in the SqlGateway.onOpen function. This vulnerability allows remote attackers to manipulate the connectAddress argument, potentially causing the server to make unauthorized requests. The vulnerability has been publicly disclosed with exploit details available. The CVSS score is 7.3, indicating a high severity risk.
A critical heap-based buffer overflow vulnerability exists in the GetCAPTCHAsetting function of the HNAP Handler component in D-Link DIR-878 firmware version 1.20B05. This vulnerability can be exploited remotely by manipulating the uid argument. The affected product is no longer supported by the vendor. Public exploit code is available, increasing the risk of exploitation.
JeecgBoot version 3.9.5 contains a SQL injection vulnerability in the JimuBI component, specifically in the /jeecg-boot/drag/onlDragDatasetHead/getAllChartData endpoint. This flaw allows remote attackers to manipulate the 'params' argument to execute SQL injection attacks. Public exploit code is available, and the vendor has not responded to disclosure attempts. The vulnerability has a high severity rating with a CVSS score of 7.3.
OpenAM Consortium Edition versions 14.0.5 and earlier contain an open redirect vulnerability in the Liberty ID-FF service provider single sign-on flow. The vulnerability arises because the 'goto' parameter in the /preLogin endpoint is stored as the RelayState without validation, allowing redirection to arbitrary websites after authentication. This can be exploited by remote unauthenticated attackers to redirect users to malicious sites, potentially facilitating phishing attacks. Only deployments with Liberty ID-FF configured are affected; it is not enabled by default. The issue is fixed in version 14.0.6, which disables the legacy Liberty ID-FF endpoints.
JeecgBoot version 3.9.5 contains a SQL injection vulnerability in the Table Dictionary API, specifically in the JimuFormApiService.getTableDictList function. This flaw allows remote attackers with low privileges to manipulate the searchSql argument, potentially leading to unauthorized data access or modification. Public exploit code is available, but no official vendor response or patch has been provided.
An Incorrect Privilege Assignment vulnerability exists in DynamiApps Frontend Admin (acf-frontend-form-element) up to version 3.30.1. This flaw allows an attacker to escalate privileges, potentially gaining unauthorized high-level access. The vulnerability is rated critical with a CVSS score of 9.1, indicating it is remotely exploitable without user interaction and can lead to complete confidentiality and integrity compromise.
A cross-site scripting (XSS) vulnerability exists in Dianping CAT versions 3.0.0, 3.1.0, and 4.0-RC1. The flaw is in the Model.getDomain function within the Report Handler component, specifically in the WEB-INF/tags/hourlyReport.tag file. Remote attackers can exploit this vulnerability by manipulating the 'domain' argument. Public exploit code has been disclosed, but the vendor has not responded or provided a fix.