praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in `internal/telegram/bot.go` concatenate the attacker-controlled document filename into a destination path without sanitization, and `path.Join` collapses parent-directory traversal. A remote Telegram user who can message the bot can therefore write outside `uploads/` within the persistent agent workspace mounted at `/workspace/agent`. Because `allow_from: []` permits all senders by default, no prior authentication or privilege is required in that configuration. The attacker can plant or overwrite `CLAUDE.md`, instruction, skill, hook, or configuration files that the Claude agent reads and operates on across later runs, turning a document upload into stored instruction injection. The demonstrated arbitrary-write scope is the persistent agent workspace volume, not an unrestricted host-filesystem write. This issue is fixed in version 0.9.1.
WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitrary JavaScript by submitting a crafted LINK query parameter to the /System/Session-1 endpoint. Attackers can exploit this flaw to harvest credentials, manipulate the login flow, access browser-visible data, and perform same-origin requests to controller endpoints, including an origin-switch primitive against the internal controller in Cloud RIA scenarios.
Copernik XML Factory versions prior to 0.1.2 have an XML External Entity (XXE) vulnerability due to improper restriction of XML External Entity references when XInclude is enabled. This allows an attacker to cause the application to resolve attacker-controlled xi:include references, potentially disclosing local files or making server-side requests to internal network endpoints. The vulnerability requires specific conditions including use of the stock JDK provider without Apache Xerces, explicit enabling of XInclude, and parsing XML from untrusted sources. The issue is fixed in version 0.1.2.
WIT SynApps Runtime versions up to 1.4.11 contain a vulnerability where static OAuth client credentials are hardcoded and exposed in frontend JavaScript files. This exposure allows unauthenticated attackers to extract the clientId and clientSecret, enabling them to impersonate the application in the OAuth authentication flow at the /web/api/v1/auth/token endpoint. The vulnerability undermines the confidentiality assurances of the OAuth implementation.
CVE-2026-62303 is a medium severity vulnerability in the pistache C++ REST toolkit versions 0.0.5 through 0.4.26. It involves uncontrolled resource consumption due to recursive use of std::regex_replace in path normalization, which can exhaust the stack and crash the process when processing very long request paths containing tens of thousands of consecutive slashes. Exploitation requires the deployment to allow unusually long request paths beyond the default 4096-byte limit or attacker control over router API inputs. No official patch release was confirmed at the time of disclosure.
mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointer and crash the consuming program. `OPEN_TYPE_aper_get` in `OPEN_TYPE_aper.c`, `OPEN_TYPE_ber_get` in `OPEN_TYPE_ber.c`, `OPEN_TYPE_oer_get` in `OPEN_TYPE_oer.c`, and `OPEN_TYPE_uper_get` in `OPEN_TYPE_uper.c` share the pattern: a conditional null check on `*memb_ptr2` resets presence only when the member exists, but execution then unconditionally computes an inner value from that pointer and a member offset. If the `OPEN TYPE` member has not been allocated, the null-pointer arithmetic and subsequent read cause a segmentation fault. The advisory demonstrates UPER and APER crashes for `E2connectionUpdateAcknowledge`, notes that `E2AP` uses APER, and provides a BER reproducer; OER is also explicitly identified as affected. This issue is fixed in version 1.2.5.
AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated `?script=version` endpoint accepts POST data without origin, CSRF or parameter-type validation. A `version[]` parameter becomes a PHP array that `bootstrap.inc.php` serializes into the shared `adminneo.version` cache. On later page loads, `design.inc.php` passes that cached value to `cookie()` and `rawurlencode()`, causing a `TypeError` rather than encoding a version string. A remote attacker can make the instance return HTTP 500 to all users for the cache's twenty-four-hour lifetime or until the poisoned cache is removed. Exploitation requires the web server to be able to write that shared cache; making it unwritable is an interim workaround. The issue retains the underlying type-validation defect reported previously in Adminer despite changes to AdminNeo's version-checking flow. This issue is fixed in version 5.5.0.
Nezha versions 2.0.0 up to but not including 2.4.0 contain a NULL pointer dereference vulnerability in the ServiceSentinel.loadTodayStats function. Authenticated users can exploit this by deleting their own service via the API endpoint POST /api/v1/batch-delete/service, which leaves orphaned service_histories rows. These orphaned rows cause the non-TSDB dashboard to crash on its next startup until the data is manually cleaned. This issue is fixed in version 2.4.0.
NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can submit an empty email at the /register/complete interstitial to clear a victim's email and confirmation state and revoke all their sessions.
A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD (.sub) subtitle file.
CVE-2026-119727 is a heap-based buffer overflow vulnerability in the GStreamer gst-plugins-bad H.265 video parser used in Red Hat Enterprise Linux 10. It arises from an integer underflow during parsing of a specially crafted H.265 bitstream with Screen Content Coding (SCC) palette predictor initializer settings, leading to out-of-bounds writes and application crashes. Exploitation requires an attacker to supply a malformed H.265 media file, resulting in denial-of-service without confidentiality or integrity impact. Red Hat Enterprise Linux 9 and 10 are affected, while RHEL 7 and 8 are not. No mitigation is currently available, and a fix exists upstream in GStreamer 1.28.1. Fedora 44 and rawhide include the fix, while Fedora 43 remains vulnerable.
CVE-2026-61848 is a vulnerability in the Ruby CSS parser Crass prior to version 1.0.7. The parser inefficiently handles multi-byte non-ASCII characters, causing superlinear parsing time. An attacker can exploit this by providing CSS input with many non-ASCII characters to cause excessive CPU usage and potential denial of service. The issue is fixed in Crass version 1.0.7.
Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when the `:preserve_comments` option is not enabled, which is the default, Crass discards CSS comments by recursively consuming the next token. An attacker-provided stylesheet containing a very large number of adjacent comments can cause excessive recursion and trigger a `SystemStackError`, denying service to the parsing application. Preserving comments avoids this recursive path. This issue is fixed in version 1.0.7.
Crass, a Ruby CSS parser, had an uncontrolled recursion vulnerability in versions prior to 1.0.7. The parser recursively processed CSS simple blocks and functions without limiting recursion depth, allowing an attacker to craft deeply nested CSS values that cause a stack overflow or excessive memory use. This issue is fixed in version 1.0.7 by adding a configurable recursion depth limit with a conservative default.
Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts `CSS scientific notation` number values with unbounded exponentiation before clamping the result to `Float::MAX`. Applications that use Crass to parse attacker-controlled CSS strings can be forced to spend disproportionate CPU and memory parsing a tiny input, potentially resulting in a crash. This issue is fixed in version 1.0.7.
OpenAM versions prior to 16.1.1 contain a vulnerability in the RADIUS authentication module where the system improperly verifies cryptographic signatures. The module accepts the first UDP datagram from any source without validating the source IP, port, or response authenticator, allowing an attacker to forge Access-Accept packets and gain unauthorized sessions. This flaw enables impersonation of any RADIUS-mapped username without knowledge of the shared secret. The issue is fixed in version 16.1.1.
A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows a remote attacker to cause a crash in applications that process AV1 media content. By crafting a malformed AV1 bitstream containing an invalid LEB128-encoded value, an attacker can cause integer overflow in the parser, resulting in incorrect length values being used during stream processing, which can lead to a denial of service.
A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with malformed Multiview (MVC) Sequence Parameter Set data, the parser can dereference a NULL pointer during the cleanup of partially allocated internal structures after a parse failure. This can cause the application using GStreamer to crash, resulting in a denial of service.
The Forminator Forms WordPress plugin up to version 1.57.3.1 contains an Insecure Direct Object Reference (IDOR) vulnerability via the 'previous_draft_id' parameter. This flaw allows unauthenticated attackers who have obtained a victim's draft ID (e.g., from a shared 'continue later' link) to delete and overwrite saved drafts belonging to other users. The nonce intended to protect this action is publicly accessible and does not prevent exploitation.