Dokploy versions before 0.31.1 contain an OS command injection vulnerability in the getComposeContainerCommand() function. Authenticated organization members can exploit this flaw by injecting shell commands via the serviceName parameter, which is stored through backup.create or backup.update procedures. When scheduled backups run, these commands execute with root privileges due to the mounted Docker socket, allowing full host takeover. This vulnerability is critical and has been fixed in version 0.31.1.
Cervantes version v1.3-beta contains a stored cross-site scripting (XSS) vulnerability via avatar upload combined with an authentication bypass in the /Attachments endpoint. This flaw could allow an attacker to execute arbitrary code in another user's browser with elevated privileges, potentially leading to account takeover (ATO). The vulnerability has a high severity rating with a CVSS score of 8.7.
A critical buffer overflow vulnerability exists in the Edimax BR6478ACV2 router firmware version 1.23. The flaw is in the formPPTPSetup function within the webs file, where improper handling of the pptpUserName argument allows remote attackers to trigger a buffer overflow. Public exploit code has been disclosed, and the vendor has not responded to the vulnerability report.
A vulnerability in JSON::XS for Perl versions before 4.05 allows an attacker to cause stack exhaustion by crafting nested tagged values when using the allow_tags feature in decode_tag. This leads to an uncatchable segmentation fault due to C stack exhaustion, bypassing the max_depth protection.
A cross-site scripting (XSS) vulnerability exists in hrshadhin CloudSchool up to version 3.0.1 in the Event Description Handler component. The flaw is due to improper handling of input data in the file app/Http/Controllers/Backend/EventController.php. This vulnerability can be exploited remotely but requires user interaction and elevated privileges. Public exploit code is available, and the vendor has not responded to disclosure attempts.
JSON::XS versions before 4.05 for Perl have a memory leak vulnerability in the decode_hv function. When decoding an object with a missing colon after a key, the decoded key scalar is not freed if the object is rejected. This causes a process that continues running after failed decodes to retain one key per rejected document, potentially exhausting memory over time.
A weakness in Akaunting up to version 3.3.0 affects the function calculation_to_quantity in the Invoice Item Validation component. Manipulating the quantity argument can cause a numeric range comparison without a minimum check. The vulnerability can be exploited remotely and has a medium severity rating with a CVSS score of 4.3. The vendor has not responded to disclosure attempts, and no patch or fix information is currently available.
JSON::XS versions before 4.05 for Perl have a vulnerability in the incremental parser (incr_parse) that allows memory exhaustion. The parser buffers input chunks and incorrectly handles NUL bytes, causing the buffer to grow beyond the configured max_size limit. This can lead to process memory exhaustion when processing crafted input streams.
A path traversal vulnerability exists in yangzongzhuan RuoYi up to version 4.8.3 in the VelocityUtils.getFileName function of the Code Generator component. This flaw allows remote attackers with high privileges to manipulate the className argument to perform path traversal attacks. The vulnerability has a medium severity rating with a CVSS score of 4.7.
CVE-2026-129255 is a critical vulnerability in CoolerMaster MASTERPLUS+ version 1.9.6 involving incorrect default permissions in the WinRing0x64.sys device driver component. The flaw arises from improper handling of the PhysicalAddress argument in the sub_11504 function, allowing local attackers to exploit permission issues. The vendor has not responded to disclosure attempts, and no patch or fix information is currently available.
A malicious file identified by the SHA-256 hash ae0e7b77c1e3861661e63f0c615b842232851b8021f24eefd63ce9f88023012d was observed by OffSeq Mirage honeypot sensors on 2026-11-14. This file is associated with CVE-2026-109618 and was detected four times during attacker activity on that date. The observed attack technique is T1105 (Ingress Tool Transfer), indicating the file was likely used to stage or deliver a malicious payload such as a dropper, web shell, miner, or post-exploitation tool. The attacker infrastructure was located in the Netherlands. There is no information on affected software versions or confirmed exploitation in the wild.
CVE-2026-129254 is a medium severity cross-site scripting (XSS) vulnerability in Opixido OCMS affecting an unknown function in admin/TUI/index.php. The vulnerability arises from manipulation of the 'img' argument, allowing remote attackers to execute script code. The product uses continuous delivery with rolling releases, so no specific affected or fixed versions are identified. The vendor did not respond to disclosure attempts, and no patch information is available. Exploit code has been published but no confirmed exploitation in the wild is reported.
CVE-2026-129115 is a use-after-free vulnerability in JSON::XS for Perl versions 3.0 up to but not including 4.05. The flaw occurs when encoding objects with allow_tags enabled, where the FREEZE method's serialization can cause the Perl stack to grow and reallocate, leaving saved pointers referencing freed memory. This can lead to reading freed stack memory and potentially returning undefined values without error during encoding.
JSON::XS versions from 3.04 up to but not including 4.05 for Perl contain an off-by-one error in the incr_parse function. This flaw causes the software to write one byte past the end of a heap buffer when appending a one-byte chunk during incremental parsing. The issue arises because the incremental buffer grows to one and a half times the required length without reserving space for the terminating NUL byte, leading to a heap out-of-bounds write under certain input conditions. The vulnerability is fixed in version 4.05.
CVE-2026-129113 is an integer underflow vulnerability in JSON::XS for Perl versions from 4.0_00 before 4.05. The flaw occurs in the incremental parser's buffer length management when parsing top-level numbers, leading to buffer corruption and potential process termination due to an out-of-memory error.
CVE-2026-124541 is a memory leak vulnerability in JSON::XS for Perl versions before 4.05. The flaw occurs in the decode_str function, where decoded parts of rejected long strings are not freed properly. This leads to retained memory from each rejected string, potentially exhausting process memory over time.