Overzicht van binnengekomen advisories.
2179 resultaten gevonden
Netis NC63 firmware through V3.0.0.3327 contains a critical stack-based buffer overflow vulnerability in the login handler (/bin/netis.cgi). Unauthenticated remote attackers can submit an oversized Base64-encoded password to exploit the custom Base64 decoder's lack of output length validation. This allows overwriting of saved stack state and leads to remote code execution with root privileges. The vulnerability is particularly severe because the Boa web server runs the CGI environment as root. No authentication is required to exploit this flaw, making it accessible to any remote attacker. A proof-of-concept exploit and detailed write-up have been published publicly on GitHub and a personal blog. The issue has also been documented by VulnCheck. Affected users should update firmware or restrict access to the device's web management interface as a mitigation measure.
Bekijk origineel advisory →Label Studio contains a broken access control vulnerability in its AnnotationAPI endpoint (label_studio/tasks/api.py) where the queryset is declared as Annotation.objects.all() with no organization-scoped filtering. The permission system only checks if a user is authenticated, bypassing any object-level organization boundary checks. Since annotation identifiers are sequential integers, an authenticated user from one organization can enumerate and access, modify, or delete annotations belonging to other organizations on the same instance. The same unscoped queryset vulnerability also exists in AnnotationConvertAPI in the same file. A sibling task endpoint correctly scopes queries by organization, demonstrating that the fix pattern is known but was not applied here. This represents a significant multi-tenant isolation failure in Label Studio deployments shared across organizations.
Bekijk origineel advisory →A SQL injection vulnerability has been identified in SourceCodester Simple Online Food Ordering System version 1.0. The vulnerability exists in the file /fos/admin/ajax.php?action=confirm_order, where manipulation of the 'ID' argument leads to SQL injection. The attack can be executed remotely without requiring physical access to the target system. A public exploit has been released, increasing the risk of active exploitation. The vulnerability affects the admin panel's order confirmation functionality. It has been catalogued under CVE-2026-78247 and is listed on multiple vulnerability tracking platforms including NVD and VulDB. Organizations using this software should apply patches or mitigations immediately. The public disclosure of the exploit raises the criticality of this issue significantly.
Bekijk origineel advisory →A critical out-of-bounds write vulnerability was discovered in warmcat libwebsockets version 4.5.0. The flaw exists in the function report_raw_cbor within lib/misc/lecp.c, part of the LECP CBOR Recording component. The vulnerability can be exploited remotely, allowing attackers to perform out-of-bounds memory writes. A public proof-of-concept exploit has been released, increasing the risk of active exploitation. A patch has been identified via commit 1d44554a1bb262db63ff4e240152a9deecd99054 in the official repository. Users are strongly advised to apply the patch immediately. The vulnerability was publicly disclosed and tracked under CVE-2026-78161.
Bekijk origineel advisory →A SQL injection vulnerability has been identified in itsourcecode Payroll System version 1.0. The vulnerability resides in the Login function within the admin_class.php file. Attackers can manipulate the Username argument to perform SQL injection attacks. The vulnerability is remotely exploitable, requiring no physical access to the target system. A public exploit has already been disclosed, increasing the risk of active exploitation. The affected product is a payroll management system, making it a sensitive target due to the financial and personal data it handles. No authentication is required to trigger the vulnerability, as it exists in the login mechanism itself. Organizations using this software are advised to apply patches or mitigations immediately.
Bekijk origineel advisory →CVE-2026-32551 describes an unauthenticated SQL injection vulnerability affecting the Woo Essential WordPress plugin in versions 4.3.0 and below. The vulnerability allows unauthenticated attackers to interact directly with the database, potentially enabling data extraction, modification, or deletion. No authentication is required to exploit this flaw, making it particularly dangerous for any WordPress site running the affected plugin. The issue has been documented on both the NVD and Patchstack databases. Users are advised to update the plugin beyond version 4.3.0 to remediate the vulnerability. The criticality is rated High due to the unauthenticated nature of the exploit and the potential for significant data compromise.
Bekijk origineel advisory →A critical unauthenticated privilege escalation vulnerability has been identified in the Digits WordPress plugin affecting versions up to and including 9.2. The vulnerability allows unauthenticated attackers to escalate their privileges, potentially gaining administrative access to affected WordPress installations. The flaw is tracked as CVE-2026-28165 and has been documented by both the NVD and Patchstack. No authentication is required to exploit this vulnerability, making it particularly dangerous. WordPress site administrators using the Digits plugin should update to a patched version immediately. The vulnerability was reported via Patchstack's WordPress vulnerability database. The high severity rating reflects the risk of complete site compromise without any prior authentication.
Bekijk origineel advisory →CVE-2026-76072 affects the Continue CLI, which uses an incomplete denylist as its sole barrier against destructive shell commands in headless and auto (unattended) modes. The default policy grants the Bash tool broad 'allow' permissions, with blocking only occurring when the terminal-security evaluator returns a 'disabled' verdict. The dangerous-path check covers only a limited set of paths, leaving /home, /root, /var, /opt, and /srv unprotected from recursive forced deletion. Shell variable expansion via shell-quote parsing causes $HOME to resolve to an empty token, bypassing the dangerous-path check. Dangerous commands such as shred, wipefs, truncate, and pkexec are entirely unhandled, and find with -delete is merely rated high risk rather than blocked. Because the agent autonomously processes external content including web pages, repository files, and issue text, an indirect prompt injection attack can trigger unattended data destruction. This vulnerability enables an attacker to cause complete data loss for the invoking user through crafted malicious content.
Bekijk origineel advisory →CVE-2026-76835 describes a critical authentication bypass vulnerability in OAuth2 Proxy affecting its default reverse-proxy configuration. The flaw exists because the proxy trusts client-supplied X-Forwarded-Uri headers when evaluating skip-auth rules, while the guard introduced for CVE-2026-40575 is ineffective in this default setup. The root cause is that buildTrustedProxyNetSet defaults to 0.0.0.0/0 and ::/0 when trusted_proxy_ip is not explicitly configured, effectively trusting every client as a proxy. An unauthenticated attacker can set X-Forwarded-Uri to a value matching an allow-listed route, causing the skip-auth decision to be made against the spoofed path while the actual protected upstream path is forwarded unchanged. This allows complete bypass of authentication controls without any credentials. The vulnerability impacts installations running in reverse-proxy mode without explicit trusted_proxy_ip configuration, which is the default state. Affected code spans pkg/requests/util/util.go, oauthproxy.go, and pkg/apis/middleware/scope.go.
Bekijk origineel advisory →A vulnerability has been identified in EFM ipTIME T16000M firmware version 14.20.2. The flaw resides in the function httpcon_check_session_url within the Session Validation Handler component. The vulnerability leads to improper authentication, allowing remote attackers to bypass session validation. Exploitation is possible remotely without physical access to the device. A public exploit has already been released, increasing the risk of active attacks. The vulnerability was responsibly disclosed to the vendor, but no response was received. The public availability of the exploit significantly raises the threat level for affected devices. Network devices like routers are critical infrastructure components, making this a high-priority issue. Organizations using the affected firmware version should apply mitigations or monitor for exploitation attempts.
Bekijk origineel advisory →A SQL injection vulnerability has been identified in Shenzhen Gongji Technology's XBROTHER Dynamic Environment Monitoring System, affecting versions up to 300R004C00B300. The vulnerability resides in the PlanController.getImmediatePlans function within the /xbreport/api/v1/plamange/plansImmediate endpoint. Attackers can manipulate the 'order' or 'sort' arguments to perform SQL injection attacks remotely. The exploit has been publicly disclosed, increasing the risk of active exploitation. This affects monitoring infrastructure systems commonly used in data center and facility management environments. No authentication details are specified, suggesting potential unauthenticated access. The public disclosure and remote exploitability make this a high-severity issue requiring prompt patching.
Bekijk origineel advisory →CVE-2026-59564 describes an authentication bypass vulnerability in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal. The flaw could allow an attacker to bypass authentication mechanisms in the communication channel between these components. Zscaler Client Connector is a widely deployed enterprise security agent used for zero-trust network access. An authentication bypass in this component could have significant security implications for organizations relying on Zscaler for network security enforcement. The vulnerability is documented on the NVD and has an associated release summary from Zscaler detailing affected versions. The current criticality is rated High, suggesting meaningful risk to affected deployments. Users of affected versions should consult the Zscaler release summary to identify fixed versions and apply patches promptly.
Bekijk origineel advisory →A SQL injection vulnerability has been identified in the Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System, affecting versions up to 300R004C00B300. The vulnerability exists in the PlanController.getImmediatePlans function within the /xbreport/api/v1/plamange/plansImmediate endpoint. Attackers can manipulate the 'order' or 'sort' arguments to perform SQL injection attacks remotely. The exploit has been publicly disclosed, increasing the risk of active exploitation. No authentication barrier details are specified, suggesting potential unauthenticated remote access. The vulnerability poses a significant risk to organizations using this environmental monitoring system. Public disclosure of the exploit raises the urgency for patching or mitigating the affected systems.
Bekijk origineel advisory →A vulnerability was discovered in rpmbuild where processing a crafted tarball in tarball mode can lead to macro injection via specially designed tar member names. This flaw allows a remote attacker to execute arbitrary code on the affected system. The attack vector requires social engineering, convincing a user to build a malicious tarball. The vulnerability is tracked as CVE-2026-78367 and has been reported to Red Hat's security team. References include Red Hat's security advisory, a Bugzilla bug report, and a GitHub issue in the rpm-software-management repository. The issue affects the RPM build toolchain, which is widely used in Linux distributions such as Red Hat Enterprise Linux and Fedora. Given its potential for remote code execution, this vulnerability is considered high severity.
Bekijk origineel advisory →A vulnerability has been identified in Open5GS version 2.8.0 affecting the function pcrf_rx_aar_cb in the file src/pcrf/pcrf-rx-path.c within the Rx AA-Request Handler component. The vulnerability allows an out-of-bounds read condition to be triggered through manipulation of the affected function. The attack can be initiated remotely, increasing its potential impact. A patch has been developed and identified by commit hash c18dc6938bf63cc7374315d3dca303d92066e746. Affected users are strongly recommended to apply the patch immediately. The vulnerability is tracked under CVE-2026-78157 and has been referenced in both the NVD and VulDB databases. Open5GS is an open-source implementation of 5G and LTE core network components, making this vulnerability relevant to telecommunications infrastructure.
Bekijk origineel advisory →A critical unauthenticated privilege escalation vulnerability has been identified in the Jawn WordPress theme affecting versions 1.4.2 and below. The vulnerability allows unauthenticated users to escalate their privileges, potentially gaining administrative access to affected WordPress installations. This type of vulnerability poses a significant risk as it requires no prior authentication to exploit. The issue is tracked as CVE-2026-66648 and has been documented by both the NVD and Patchstack. Users of the Jawn theme are advised to update to a patched version as soon as one becomes available. The vulnerability was disclosed through Patchstack's WordPress vulnerability database. No additional technical details about the exploitation method are provided in the current disclosure.
Bekijk origineel advisory →A SQL injection vulnerability has been identified in itsourcecode Sales and Inventory System version 1.0. The vulnerability exists in the file /pages/processlogin.php, where manipulation of the 'User' argument allows an attacker to perform SQL injection. The attack can be initiated remotely without requiring physical access to the system. The exploit has been publicly disclosed and is available for use, increasing the risk of exploitation. This vulnerability poses a significant risk to organizations using this software, as it could allow attackers to access, modify, or delete database contents. The affected product is a sales and inventory management system commonly used by small businesses. No patch or mitigation details are mentioned in the article. The vulnerability has been catalogued in VulDB and NVD databases.
Bekijk origineel advisory →CVE-2026-32558 describes an unauthenticated privilege escalation vulnerability affecting the Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin in versions up to and including 8.9.1. The vulnerability allows unauthenticated attackers to escalate their privileges, posing a significant security risk to WordPress and WooCommerce installations using this plugin. The flaw has been documented by both the NVD (National Vulnerability Database) and Patchstack. No authentication is required to exploit this vulnerability, making it particularly dangerous for affected sites. Users are advised to update the plugin beyond version 8.9.1 to remediate the issue. The vulnerability is classified as high severity given the unauthenticated nature of the exploit and the potential for full privilege escalation.
Bekijk origineel advisory →CVE-2026-59568 describes multiple vulnerabilities affecting Zscaler Client Connector (ZCC) that enable remote code execution. The flaws allow an unauthenticated, unprivileged remote user to execute arbitrary code within the ZCC context. The vulnerabilities are present in affected versions of the Zscaler Client Connector software. No authentication or special privileges are required to exploit these vulnerabilities, making them particularly severe. The issue is documented on the NVD and Zscaler's own release summary page. Zscaler has published a Client Connector App Release Summary for 2026 that likely contains patched versions. The criticality is rated High due to the unauthenticated RCE nature of the vulnerability. Organizations using affected versions of Zscaler Client Connector should update immediately.
Bekijk origineel advisory →CVE-2026-32559 describes an Arbitrary File Upload vulnerability affecting the UltimateAI WordPress plugin in versions 3.1.0 and below. The flaw allows subscriber-level authenticated users to upload arbitrary files to the server, which could lead to remote code execution or site compromise. This type of vulnerability is particularly dangerous in WordPress environments as it can allow low-privileged users to gain elevated access. The vulnerability has been documented by both the NVD and Patchstack security database. Users of the UltimateAI plugin are advised to update to a patched version immediately. The issue is rated as high severity given the potential for significant impact on affected WordPress installations.
Bekijk origineel advisory →