A vulnerability exists in GStreamer's MXF demuxer plugin (gst-plugins-bad) where it improperly indexes internal tables using unvalidated values from specially crafted MXF media files. This can cause a denial of service (application crash) and may allow limited reading of adjacent heap memory. Exploitation requires a local attacker to trick a user into opening a malicious MXF file. No code execution or write primitives have been demonstrated. Red Hat Enterprise Linux versions 9.4 and later, Red Hat Enterprise Linux 10, Red Hat In-Vehicle Operating System, and current Fedora streams with GStreamer versions 1.22.x through 1.28.8 are affected. Earlier Red Hat versions and RHEL 9.2 with GStreamer 1.18.4 are not affected. Mitigation involves avoiding untrusted MXF files or disabling the mxfdemux plugin until a fixed package is available.
C-Prot AppDefense before version 1.0.2729 contains a vulnerability involving improperly controlled modification of dynamically-determined object attributes, which can lead to privilege escalation. The vulnerability is identified as CVE-2026-95648 and has a high severity score of 8.1. It allows an attacker with some privileges to escalate their privileges further without user interaction. No public exploits or known active exploitation have been reported. No patch or remediation details are provided in the available data.
Infoblox NIOS versions up to 9.1.0 have a vulnerability due to improper input validation that allows stored cross-site scripting (XSS). This vulnerability can lead to limited confidentiality and integrity impacts but does not affect availability. The flaw requires high privileges and user interaction to exploit and affects the confidentiality and integrity of the system in a scope-changing manner.
A reflected Cross-site Scripting (XSS) vulnerability exists in the Invoice Gateway for WooCommerce – Invoice Payment Gateway plugin, affecting versions up to 1.1.6. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to execute arbitrary scripts in a user's browser. The vulnerability has a high severity rating with a CVSS score of 7.1.
A use of uninitialized memory vulnerability exists in GStreamer's gst-plugins-bad package affecting the H.265 (HEVC) bitstream parser when processing Video Parameter Sets with multiple HRD parameter sets. This flaw can cause unpredictable parser behavior and application crashes, leading to denial of service when playing crafted H.265 media files or streams.
An OS command injection vulnerability exists in TÜBİTAK BİLGEM Pardus Boot Repair versions from 1.0.8 up to but not including 1.0.9. This flaw allows an attacker with local privileges to execute arbitrary operating system commands due to improper neutralization of special elements in OS commands.
pdfmake versions prior to 0.3.14 have a vulnerability in their shared resource caching mechanism. This flaw allows attackers to access cached resources across different documents by exploiting a process-wide virtual file system keyed only by URL, without enforcing request headers or per-document access controls. As a result, attackers can retrieve resources fetched with other callers' credentials or access URLs that should be restricted by later document policies, leading to cross-document information disclosure and bypass of URL access restrictions.
rConfig Core versions before 8.2.19 and rConfig Pro versions before 8.4.1 have a critical deserialization of untrusted data vulnerability. This flaw allows unauthenticated network attackers to execute arbitrary code by pushing crafted serialized jobs onto a Redis-backed Laravel Horizon queue that runs without authentication. The vulnerability arises because Laravel's CallQueuedHandler unserializes jobs without class restrictions, enabling attackers to instantiate a specific job class and execute attacker-controlled Artisan commands. Exploitation can lead to arbitrary PHP and OS command execution, persistent web shell installation, and disclosure of sensitive credentials. If Redis is not directly accessible, authenticated attackers can still exploit the vulnerability via the application by targeting the server's loopback address.
A time-of-check time-of-use (TOCTOU) vulnerability exists in olivier-ls PHP-FTS versions up to 1.1.3 affecting the TrigramIndex::open function in Storage.php. The vulnerability requires local access with write permissions to the index directory by a user other than the application user, a scenario common in shared hosting environments. Exploitation could lead to limited confidentiality, integrity, and availability impacts, with potential code execution only if the attacker can create a symlink to a web-served PHP file. Upgrading to version 1.1.4 addresses this issue.
A privilege escalation vulnerability was discovered in the Reader View component of Firefox for iOS. This flaw could allow an attacker to gain elevated privileges within the application. The issue was addressed and fixed in Firefox for iOS version 160.0.
A stored cross-site scripting (XSS) vulnerability exists in Wpmet ShopEngine versions up to 4.9.8. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker with low privileges to execute scripts in the context of other users. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
A security flaw in PipraPay 3.0.0 affects the system-settings-import function in the ZIP Archive Handler component, allowing unrestricted upload through manipulation. The vulnerability can be exploited remotely. Public exploit code is available, but the vendor has not yet responded or issued a fix. The CVSS score is 4.7, indicating medium severity.
This vulnerability involves multiple hardcoded credentials embedded within product components and administrative functionalities. These credentials could allow unauthorized users to gain privileged access to accounts, services, or application features in affected deployments. The vulnerability has a critical severity rating with a CVSS score of 9.2. No affected versions or patch information are provided, and there are no known exploits in the wild at this time.
This vulnerability involves the exposure of multiple sensitive authentication data types, including credentials, OAuth-related secrets, session information, and authentication artifacts. These sensitive data are leaked through application logs and persistent client-side storage, which can enable unauthorized access and session compromise. The vulnerability has a medium severity rating with a CVSS score of 6.9. There is no information about affected software versions or available patches. No known exploits are reported in the wild.
This vulnerability allows an attacker to inject malicious SQL statements through user-controlled input, potentially leading to unauthorized access, modification, or disclosure of database data. It is classified as a high-severity issue with a CVSS score of 7.3. No specific affected versions or patches are provided in the available data.
This vulnerability involves administrative roles and module permissions being stored in mutable local database fields. Attackers with write access to the database can exploit this to escalate privileges. The flaw does not require user interaction and has a high severity score of 8.5. No patch or remediation details are provided, and no known exploits are reported in the wild.
WidzialniCMS has a vulnerability in its login functionality that allows bypassing brute force protection. The protection mechanism relies on cookies (login_count and login_timeout) to lock out repeated login attempts. An attacker can omit these cookies to bypass the lockout and perform unlimited login attempts. This issue is fixed in version 2.5.
CVE-2026-118792 is a vulnerability where default credentials allow unauthorized access through AcuXDBC. This issue permits attackers to gain access without needing to authenticate properly, posing a significant security risk.
A vulnerability in iubenda-cookie-law-solution versions up to 3.13.6 allows allocation of resources without limits or throttling, leading to an HTTP denial-of-service (DoS) condition. This flaw can be exploited remotely without authentication or user interaction. The vulnerability is identified as CWE-770 and has a high severity with a CVSS score of 7.5.
This vulnerability involves software that downloads upgrade files without verifying their integrity, which can allow attackers to install tampered or malicious updates. The flaw is identified as CVE-2026-112170 and has a high severity score of 8.7. No affected versions or patch information are provided, and there are no known exploits in the wild at this time.