WidzialniCMS has an Unrestricted File Upload vulnerability in the /panel/upload.php endpoint. An unauthenticated attacker can exploit a client-controlled permission check parameter and insufficient validation of the uploadPath parameter to upload arbitrary files to any location on the server, potentially leading to remote code execution. This vulnerability is fixed in version 2.5.
WidzialniCMS contains an Unrestricted File Upload vulnerability in the /panel/controllers/save_photo.php endpoint. An unauthenticated attacker can exploit a client-controlled permission check parameter and insufficient validation of the currentpath parameter to upload arbitrary files to any location on the server. This can lead to remote code execution. The vulnerability has been fixed in version 2.5.
Magistra software contains an undocumented backdoor that permits authentication bypass and allows an attacker to create a privileged user account without credential verification. This vulnerability enables unauthorized access with elevated privileges.
XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload a malicious file and exercise Stored XSS attack.
CVE-2026-124959 is an out-of-bounds write vulnerability in the loadIndex function of Spotify Voyager and related libraries nmslib and hnswlib. The vulnerability arises because the function does not verify that the element count in a serialized HNSW index is within the allocated buffer capacity. An attacker can craft a malicious index file with an element count exceeding the stored capacity, causing the loader to write beyond the allocated heap buffer and potentially crash the application.
PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mode configuration. A back-office user with permission to modify debug settings can supply a crafted `debug_cookie_name` or `debug_cookie_value` that is written without sufficient escaping into a PHP configuration file. When PrestaShop subsequently loads the generated file, the injected PHP code is executed with the privileges of the web-server process.
The npm package '@gqb333/based' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone does not guarantee the removal of all malicious software or backdoors introduced by this package.
The npm package '@gqb333/baileys' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software, as the attacker may have gained full control of the system.
CVE-2026-124850 is a SQL injection vulnerability in a database migration script of flowintel versions prior to 4.0.0. The migration process interpolates stored connector identifier values directly into SQL statements without parameterization. An attacker with prior write access to the database can plant malicious identifier values that trigger arbitrary SQL execution during an upgrade. This can lead to unauthorized data disclosure, modification, or deletion.
Red Hat OpenShift Container Platform 5.0.1 includes multiple security fixes addressing critical vulnerabilities in components such as the kernel, OpenSSL, qemu-kvm, cryptography libraries, and others. These fixes resolve issues including privilege escalation, denial of service, information disclosure, memory corruption, and use-after-free bugs. Users of OpenShift Container Platform 5.0 are advised to upgrade to this release to mitigate these vulnerabilities.
CVE-2026-0000 is a SQL injection vulnerability in a database migration script of flowintel versions prior to 4.0.0. The migration process interpolates stored connector identifier values directly into SQL statements without parameterization, allowing an attacker with prior write access to the database to execute arbitrary SQL during an upgrade. This can lead to unauthorized data disclosure, modification, or deletion.
A path traversal attack in simulation of actions in the Zypp backend of PackageKit before 1.4.1 could be used by local attackers to gain root privileges.
This report summarizes every TLS certificate authority (CA) incident recorded in Mozilla's CA program from 2017 through November 2026, totaling 1,581 incidents across 108 CAs. The dataset highlights incident counts, self-reporting rates, late revocations, and slow response metrics per CA. While 2026 is the busiest year with 338 incidents, only 11 incidents are classified as critical, with eMudhra's computable keys incident being the sole case where a CA lost control of its own keys. The report provides comparative incident rates normalized by peak certificate issuance per CA, revealing significant variance in incident frequency and response quality among CAs. Some CAs have been distrusted due to their incident records. This dataset is intended for transparency and analysis of CA operational security over time.
http.cookiejar.CookieJar deleted a stored cookie when a response carried an
already expired Set-Cookie header for it, using the Domain and Path
attributes from the header without consulting the cookie policy. A server
could therefore delete cookies belonging to other domains from a shared
cookie jar, such as the one used by urllib's HTTPCookieProcessor. The fix
consults the cookie policy before an expired cookie may delete an existing
one, as required by RFC 6265 section 5.3.
CVE-2026-119474 is a vulnerability in HAVELSAN Inc. Liman Render Engine versions before 1.2-81. It involves incorrect permission assignment for a critical resource, which can lead to privilege escalation. The vulnerability has a high severity score of 7.8 and affects versions from 0 up to but not including 1.2-81. A fix is available in version 1.2-81.
A security flaw has been discovered in kevquirk PureBlog up to 3.7.2. The affected element is the function save_page of the file includes/lib/content.php of the component Page Editor. Performing a manipulation of the argument page slug results in path traversal. Remote exploitation of the attack is possible. Upgrading to version 3.7.3 is sufficient to fix this issue. The patch is named 71f5b0de2ecb2bb2934048ed40e1155c107484e3. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Online fashion retailer Revolve experienced a data breach in September 2026 affecting over 1.5 million individuals. An unauthorized party accessed some of Revolve's systems, including its e-commerce platform, potentially using automated methods to collect customer names, contact information, mailing addresses, and stored payment card numbers with expiration dates. The breach impacted customers who had stored payment methods in their online accounts. Revolve reported the incident to federal law enforcement and engaged external cybersecurity experts for response. The company has not disclosed the exact method of intrusion, and no hacker group has claimed responsibility.