Search: 1.2.4.4

CVE-2026-93521 is a heap-based buffer overflow vulnerability in the RandR ChangeProviderProperty requests of X.Org X Server and XWayland. It affects versions before 21.1.25 of X.Org X Server and before 24.1.14 of XWayland. Authenticated X clients could exploit this flaw to crash the X server or execute arbitrary code within its context.

A critical eval injection vulnerability (CWE-95) exists in the xwiki-pro-macros component of XWiki Remote Macros between versions 1.13 and 1.14.4. The `excerpt-include` macro improperly escapes included page titles and executes excerpt content with macro rights, allowing users with page edit permissions to inject executable macro syntax. This can lead to remote code execution affecting confidentiality, integrity, and availability of the entire XWiki installation. The issue is fixed in version 1.14.5.

A critical deserialization of untrusted data vulnerability (CWE-502) exists in Ultimate Member plugin versions up to 2.13.1. This flaw allows an attacker to perform object injection, potentially leading to full compromise of confidentiality, integrity, and availability.

Waline versions prior to 1.41.1 have a partial authentication bypass vulnerability in the login endpoint POST /api/token. The endpoint reads the email field from the request body without validating its type and passes it directly into a MongoDB query. If the email is a non-string JSON object, the query filter becomes empty and matches all users, causing the system to verify the password against the first user (the administrator). This allows attackers to bypass the email check for the administrator account, enabling user enumeration and credential-stuffing amplification. The issue is patched in version 1.41.1.

A use-after-free vulnerability exists in the present_clear_window_notifies() function in the X.org X Server versions before 21.1.25 and X Wayland versions before 24.1.14. This flaw could allow malicious X clients with limited privileges to crash the X server or potentially execute code within the server context.

A use-after-free vulnerability exists in X.org X Server before version 21.1.25 and XWayland before version 24.1.14 due to improper lifecycle management when adding or removing XInput master devices. Authenticated X clients could exploit this flaw to crash the X server, causing denial of service, or potentially execute code within the X server context.

A stored cross-site scripting (XSS) vulnerability exists in SliceWP versions up to 1.2.13 due to improper neutralization of input during web page generation. This vulnerability allows an attacker to inject malicious scripts that can execute in the context of other users. The flaw affects confidentiality, integrity, and availability of the affected system.

A critical SQL Injection vulnerability exists in Crowd Favorite DXP ToolKit up to version 2.0.1. This flaw allows an attacker to inject malicious SQL commands due to improper neutralization of special elements in SQL queries. The vulnerability has a high CVSS score of 9.3, indicating network exploitable with no privileges or user interaction required, and can cause high confidentiality impact and low availability impact.

A stored cross-site scripting (XSS) vulnerability exists in Crowd Favorite DXP ToolKit up to version 2.0.1. This vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts that execute in users' browsers. The vulnerability has a high severity score of 7.1 (CVSS 3.1) and affects confidentiality, integrity, and availability.

CVE-2026-93520 is a heap-based buffer overflow vulnerability in X.org X server and XWayland caused by mismatched size calculations between XkbAllocNames and ChangeKeycodeRange. It affects versions of X.org X server before 2.1.25 and XWayland before 24.1.14. Authenticated X clients could exploit this flaw to crash the X server or potentially execute arbitrary code within its context.

CVE-2026-93519 is a heap-based buffer overflow vulnerability in the XFIXES extension handling of pointer barriers in X.Org X server versions before 21.1.25 and XWayland versions before 24.1.14. Authenticated X clients could exploit this flaw to crash the X server or potentially execute arbitrary code within the server context.

CVE-2026-93518 is a heap-based buffer overflow vulnerability in X.org X server and XWayland caused by an integer truncation issue in the XkbResizeKeyType() function. It affects authenticated X clients on versions before 21.1.25 for X.org X server and before 24.1.14 for XWayland. Exploitation could lead to crashes or potential code execution within the X server.

CVE-2026-116078 is a resource exhaustion vulnerability in the HTTP/2 request body reader of mtrudel bandit. An unauthenticated remote attacker can exhaust server memory by sending a request body composed of many 1-byte DATA frames. This occurs because each 1-byte DATA frame is stored as a separate list element, causing excessive memory use. The issue affects bandit versions from 0.3.1 up to but not including 1.14.1. The vulnerability is fixed in version 1.14.1.

CVE-2026-93517 is a heap-based buffer overflow vulnerability in the X.org X server and XWayland. It occurs in the handling of the GLX RenderLarge request when dataBytes exceeds cmdlen. This flaw affects versions of X.org X server before 21.1.25 and XWayland before 24.1.14. An authenticated X client can trigger this vulnerability, potentially causing crashes or arbitrary code execution within the X server context.

Three TLS vulnerabilities were disclosed in the GoAhead web server used in hundreds of millions of devices across IoT, OT, firewall, and military sectors. The critical flaw (CVE-2026-115881) affects versions 3.4.5 through 6.1.0 built with OpenSSL or compatible libraries configured for mutual TLS with certificate revocation lists, allowing revoked certificates to be accepted. Another flaw affects versions 4.0.2 through 6.1.0 built with Mbed TLS, weakening encryption of some TLS 1.2 connections and enabling offline decryption of recorded sessions if clients accept flawed parameters. A third flaw (CVE-2026-115884) impacts versions up to 6.1.0 built with LibreSSL 3.2.x or 3.3.2 through 3.3.6, bypassing certificate chain length limits under certain configurations. GoAhead 6.1.1 fixes the OpenSSL and Mbed TLS issues, and mitigations exist for the LibreSSL issue. The availability of upstream fixes does not guarantee device patches, which depend on manufacturers.

CVE-2026-59176 affects the functype TypeScript functional programming libraries prior to version 1.4.4. The vulnerability arises from the MCP tool `set_functype_version` accepting an unconstrained version string that can include package-alias syntaxes, allowing arbitrary local or remote packages to be installed and executed with MCP server privileges. This can lead to execution of attacker-controlled JavaScript code. The flaw is exploitable by any MCP client invoking the tool, which is enabled by default without authentication in stdio mode, and potentially by a connected AI assistant vulnerable to indirect prompt injection. The issue is fixed in version 1.4.4.