This vulnerability involves an application that implements software update functionality without adequate authenticity and integrity validation. As a result, update packages can be accepted without sufficient cryptographic verification, potentially allowing malicious updates to be installed.
A vulnerability in GStreamer's gst-plugins-good H.264 RTP depayloader element allows remote attackers to trigger an out-of-bounds heap read by sending a malformed RTP packet. This flaw arises from a signed/unsigned integer conversion error when processing MTAP16 or MTAP24 multi-time aggregation RTP packets, causing a length counter underflow. Exploitation can crash the GStreamer pipeline (denial of service) and potentially expose adjacent heap memory in relay or transcoding scenarios.
WidzialniCMS has a reflected cross-site scripting (XSS) vulnerability in its /index.php endpoint. This flaw allows an attacker to craft a malicious URL that executes arbitrary JavaScript in the victim's browser, potentially leading to session cookie theft. The vulnerability has been fixed in version 2.5.
CVE-2026-112168 describes a vulnerability in Magistra software where weak custom encryption and an outdated compression algorithm are used to protect the database. Additionally, the software contains embedded secrets. These weaknesses could potentially compromise the confidentiality and integrity of the database.
WidzialniCMS has an Unrestricted File Upload vulnerability in the /panel/upload.php endpoint. An unauthenticated attacker can exploit a client-controlled permission check parameter and insufficient validation of the uploadPath parameter to upload arbitrary files to any location on the server, potentially leading to remote code execution. This vulnerability is fixed in version 2.5.
WidzialniCMS contains an Unrestricted File Upload vulnerability in the /panel/controllers/save_photo.php endpoint. An unauthenticated attacker can exploit a client-controlled permission check parameter and insufficient validation of the currentpath parameter to upload arbitrary files to any location on the server. This can lead to remote code execution. The vulnerability has been fixed in version 2.5.
Magistra software contains an undocumented backdoor that permits authentication bypass and allows an attacker to create a privileged user account without credential verification. This vulnerability enables unauthorized access with elevated privileges.
XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload a malicious file and exercise Stored XSS attack.
CVE-2026-124959 is an out-of-bounds write vulnerability in the loadIndex function of Spotify Voyager and related libraries nmslib and hnswlib. The vulnerability arises because the function does not verify that the element count in a serialized HNSW index is within the allocated buffer capacity. An attacker can craft a malicious index file with an element count exceeding the stored capacity, causing the loader to write beyond the allocated heap buffer and potentially crash the application.
PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mode configuration. A back-office user with permission to modify debug settings can supply a crafted `debug_cookie_name` or `debug_cookie_value` that is written without sufficient escaping into a PHP configuration file. When PrestaShop subsequently loads the generated file, the injected PHP code is executed with the privileges of the web-server process.
The npm package '@gqb333/based' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone does not guarantee the removal of all malicious software or backdoors introduced by this package.
The npm package '@gqb333/baileys' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software, as the attacker may have gained full control of the system.
CVE-2026-124850 is a SQL injection vulnerability in a database migration script of flowintel versions prior to 4.0.0. The migration process interpolates stored connector identifier values directly into SQL statements without parameterization. An attacker with prior write access to the database can plant malicious identifier values that trigger arbitrary SQL execution during an upgrade. This can lead to unauthorized data disclosure, modification, or deletion.
CVE-2026-0000 is a SQL injection vulnerability in a database migration script of flowintel versions prior to 4.0.0. The migration process interpolates stored connector identifier values directly into SQL statements without parameterization, allowing an attacker with prior write access to the database to execute arbitrary SQL during an upgrade. This can lead to unauthorized data disclosure, modification, or deletion.
A path traversal attack in simulation of actions in the Zypp backend of PackageKit before 1.4.1 could be used by local attackers to gain root privileges.
This report summarizes every TLS certificate authority (CA) incident recorded in Mozilla's CA program from 2017 through November 2026, totaling 1,581 incidents across 108 CAs. The dataset highlights incident counts, self-reporting rates, late revocations, and slow response metrics per CA. While 2026 is the busiest year with 338 incidents, only 11 incidents are classified as critical, with eMudhra's computable keys incident being the sole case where a CA lost control of its own keys. The report provides comparative incident rates normalized by peak certificate issuance per CA, revealing significant variance in incident frequency and response quality among CAs. Some CAs have been distrusted due to their incident records. This dataset is intended for transparency and analysis of CA operational security over time.
CVE-2026-124249 is a vulnerability in Python's CPython implementation affecting the http.cookiejar.CookieJar component. The flaw allows a server to delete cookies belonging to other domains from a shared cookie jar by sending an expired Set-Cookie header with manipulated Domain and Path attributes. This occurs because the CookieJar did not consult the cookie policy before deleting cookies, violating RFC 6265 section 5.3. The issue is fixed in CPython version 3.16.0.
CVE-2026-119474 is a vulnerability in HAVELSAN Inc. Liman Render Engine versions before 1.2-81. It involves incorrect permission assignment for a critical resource, which can lead to privilege escalation. The vulnerability has a high severity score of 7.8 and affects versions from 0 up to but not including 1.2-81. A fix is available in version 1.2-81.
CVE-2026-19552 is a vulnerability in Python's ssl.get_server_certificate() function where, when the ca_certs parameter is supplied, the certificate chain is verified but the identity of the certificate is not checked. This affects CPython versions prior to 3.16.0. The issue is fixed in version 3.16.0.