DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-87697: CVE-2026-87697: Untrusted Deserialization in .NET PresentationCore Clipboard Handling
cverports profile

CVE-2026-87697: CVE-2026-87697: Untrusted Deserialization in .NET PresentationCore Clipboard Handling

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70007: CVE-2026-70007: Out-of-Bounds Write Vulnerability in .NET Framework and WPF Subsystem
cverports profile

CVE-2026-70007: CVE-2026-70007: Out-of-Bounds Write Vulnerability in .NET Framework and WPF Subsystem

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-70186: CVE-2026-70186: ASP.NET Core Denial of Service Vulnerability via Framework Deadlock
cverports profile

CVE-2026-70186: CVE-2026-70186: ASP.NET Core Denial of Service Vulnerability via Framework Deadlock

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70035: CVE-2026-70035: Insecure Deserialization Remote Code Execution in Microsoft .NET Framework and .NET Runtime
cverports profile

CVE-2026-70035: CVE-2026-70035: Insecure Deserialization Remote Code Execution in Microsoft .NET Framework and .NET Runtime

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70183: CVE-2026-70183: Elevation of Privilege in ASP.NET Core and Visual Studio via Concurrent Race Condition
cverports profile

CVE-2026-70183: CVE-2026-70183: Elevation of Privilege in ASP.NET Core and Visual Studio via Concurrent Race Condition

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107844: CVE-2026-107844: Path Traversal Vulnerability in Contao ImagesController
cverports profile

CVE-2026-107844: CVE-2026-107844: Path Traversal Vulnerability in Contao ImagesController

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107848: CVE-2026-107848: Cross-Site Request Forgery (CSRF) in Contao Backend Actions via GET Requests
cverports profile

CVE-2026-107848: CVE-2026-107848: Cross-Site Request Forgery (CSRF) in Contao Backend Actions via GET Requests

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107843: CVE-2026-107843: Unthrottled Activation Email Resend and Account Enumeration in Contao CMS
cverports profile

CVE-2026-107843: CVE-2026-107843: Unthrottled Activation Email Resend and Account Enumeration in Contao CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107842: CVE-2026-107842: Information Disclosure via Stale Indexing in Contao Search Module
cverports profile

CVE-2026-107842: CVE-2026-107842: Information Disclosure via Stale Indexing in Contao Search Module

#security #cve #cybersecurity
Comments
2 min read
GHSA-G38J-7V97-X298: GHSA-G38J-7V97-X298: Missing Authorization Check in Vikunja CalDAV Task Relation Creation
cverports profile

GHSA-G38J-7V97-X298: GHSA-G38J-7V97-X298: Missing Authorization Check in Vikunja CalDAV Task Relation Creation

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-3HC7-R24J-RPWC: GHSA-3hc7-r24j-rpwc: Cross-Project Task Disclosure via Subtask Expansion in Vikunja
cverports profile

GHSA-3HC7-R24J-RPWC: GHSA-3hc7-r24j-rpwc: Cross-Project Task Disclosure via Subtask Expansion in Vikunja

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-8WVG-R2J4-3737: GHSA-8wvg-r2j4-3737: Email Address Exposure in Vikunja Task Assignees API
cverports profile

GHSA-8WVG-R2J4-3737: GHSA-8wvg-r2j4-3737: Email Address Exposure in Vikunja Task Assignees API

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-W2CH-4XGR-22WW: GHSA-W2CH-4XGR-22WW: Missing Authorization in Vikunja Task Relation Deletion
cverports profile

GHSA-W2CH-4XGR-22WW: GHSA-W2CH-4XGR-22WW: Missing Authorization in Vikunja Task Relation Deletion

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-108258: CVE-2026-108258: Path Traversal in Shiny for Python Bookmark Restoration
cverports profile

CVE-2026-108258: CVE-2026-108258: Path Traversal in Shiny for Python Bookmark Restoration

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-108260: CVE-2026-108260: Stored Cross-Site Scripting (XSS) in @tinacms/web-components
cverports profile

CVE-2026-108260: CVE-2026-108260: Stored Cross-Site Scripting (XSS) in @tinacms/web-components

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-108261: CVE-2026-108261: Admin Preview Cross-Origin Bypass and GraphQL Hijacking in TinaCMS
cverports profile

CVE-2026-108261: CVE-2026-108261: Admin Preview Cross-Origin Bypass and GraphQL Hijacking in TinaCMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-108259: CVE-2026-108259: Code Injection in @tinacms/cli via Unsanitized Git Branch Name Interpolation
cverports profile

CVE-2026-108259: CVE-2026-108259: Code Injection in @tinacms/cli via Unsanitized Git Branch Name Interpolation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107804: CVE-2026-107804: Client IP Resolution Flaw & Authentication Lockout in Nginx UI
cverports profile

CVE-2026-107804: CVE-2026-107804: Client IP Resolution Flaw & Authentication Lockout in Nginx UI

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107805: CVE-2026-107805: Unauthenticated Storage Exhaustion in Nginx UI Node Authentication
cverports profile

CVE-2026-107805: CVE-2026-107805: Unauthenticated Storage Exhaustion in Nginx UI Node Authentication

#security #cve #cybersecurity
Comments
2 min read
GHSA-4HV6-XC92-J86G: GHSA-4HV6-XC92-J86G: Insufficient Session Expiration in Vikunja WebSocket Authentication Pipeline
cverports profile

GHSA-4HV6-XC92-J86G: GHSA-4HV6-XC92-J86G: Insufficient Session Expiration in Vikunja WebSocket Authentication Pipeline

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-FPRF-R6RV-XG99: GHSA-FPRF-R6RV-XG99: Cross-Tenant Task Position Recalculation in Vikunja
cverports profile

GHSA-FPRF-R6RV-XG99: GHSA-FPRF-R6RV-XG99: Cross-Tenant Task Position Recalculation in Vikunja

#security #cve #cybersecurity #ghsa
Comments
1 min read
GHSA-HJX8-QV73-F7CM: GHSA-HJX8-QV73-F7CM: Incomplete Access Revocation Leading to Webhook Data Exfiltration in Vikunja
cverports profile

GHSA-HJX8-QV73-F7CM: GHSA-HJX8-QV73-F7CM: Incomplete Access Revocation Leading to Webhook Data Exfiltration in Vikunja

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-PJR3-86V4-5P7W: GHSA-PJR3-86V4-5P7W: Broken Access Control via MAX Aggregation in Vikunja Subtree Permissions
cverports profile

GHSA-PJR3-86V4-5P7W: GHSA-PJR3-86V4-5P7W: Broken Access Control via MAX Aggregation in Vikunja Subtree Permissions

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-FMMF-XQ98-G327: GHSA-fmmf-xq98-g327: Write-Level Project Members Can Delete Admin-Tier Link Shares in Vikunja
cverports profile

GHSA-FMMF-XQ98-G327: GHSA-fmmf-xq98-g327: Write-Level Project Members Can Delete Admin-Tier Link Shares in Vikunja

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-M687-P538-R5HP: GHSA-m687-p538-r5hp: Permissive Localhost CORS Policy Leads to Account Takeover in Vikunja
cverports profile

GHSA-M687-P538-R5HP: GHSA-m687-p538-r5hp: Permissive Localhost CORS Policy Leads to Account Takeover in Vikunja

#security #cve #cybersecurity #ghsa
Comments
3 min read
GHSA-JQ7H-WRVP-3RGX: GHSA-JQ7H-WRVP-3RGX: Insufficient Session Invalidation in pyLoad Core REST API
cverports profile

GHSA-JQ7H-WRVP-3RGX: GHSA-JQ7H-WRVP-3RGX: Insufficient Session Invalidation in pyLoad Core REST API

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-9Q47-3CM2-2RP8: GHSA-9Q47-3CM2-2RP8: Rate-Limit Bypass and Audit Log Spoofing in pyLoad WebUI
cverports profile

GHSA-9Q47-3CM2-2RP8: GHSA-9Q47-3CM2-2RP8: Rate-Limit Bypass and Audit Log Spoofing in pyLoad WebUI

#security #cve #cybersecurity #ghsa
Comments
1 min read
GHSA-68W4-83FH-F2W8: GHSA-68W4-83FH-F2W8: Privilege Escalation and Administrative Password Oracle in pyLoad-ng
cverports profile

GHSA-68W4-83FH-F2W8: GHSA-68W4-83FH-F2W8: Privilege Escalation and Administrative Password Oracle in pyLoad-ng

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-R44W-V6GF-X3P6: Authentication Bypass in pyLoad API Key Caching Mechanism (GHSA-R44W-V6GF-X3P6)
cverports profile

GHSA-R44W-V6GF-X3P6: Authentication Bypass in pyLoad API Key Caching Mechanism (GHSA-R44W-V6GF-X3P6)

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-107728: CVE-2026-107728: Authorization Bypass in Strawberry GraphQL Permission Validation
cverports profile

CVE-2026-107728: CVE-2026-107728: Authorization Bypass in Strawberry GraphQL Permission Validation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107727: CVE-2026-107727: Connection-Level Denial of Service via State Leak in Strawberry GraphQL Legacy WS Handler
cverports profile

CVE-2026-107727: CVE-2026-107727: Connection-Level Denial of Service via State Leak in Strawberry GraphQL Legacy WS Handler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107723: CVE-2026-107723: Silent Claim-Validator Bypass in NearForm fast-jwt via Array Payload Type Confusion
cverports profile

CVE-2026-107723: CVE-2026-107723: Silent Claim-Validator Bypass in NearForm fast-jwt via Array Payload Type Confusion

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107721: CVE-2026-107721: Time Validation Bypass in NearForm fast-jwt due to Loose Temporal Option Validation
cverports profile

CVE-2026-107721: CVE-2026-107721: Time Validation Bypass in NearForm fast-jwt due to Loose Temporal Option Validation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107722: CVE-2026-107722: Algorithm Confusion via Non-Whitespace Prefix Bypass in fast-jwt
cverports profile

CVE-2026-107722: CVE-2026-107722: Algorithm Confusion via Non-Whitespace Prefix Bypass in fast-jwt

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107720: CVE-2026-107720: Signature Verification Bypass in NearForm fast-jwt
cverports profile

CVE-2026-107720: CVE-2026-107720: Signature Verification Bypass in NearForm fast-jwt

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107715: CVE-2026-107715: Information Disclosure and Credential Leakage in Ruby Mechanize via Cross-Origin Redirections
cverports profile

CVE-2026-107715: CVE-2026-107715: Information Disclosure and Credential Leakage in Ruby Mechanize via Cross-Origin Redirections

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107399: CVE-2026-107399: Information Disclosure via HTML Meta-Refresh in Ruby Mechanize
cverports profile

CVE-2026-107399: CVE-2026-107399: Information Disclosure via HTML Meta-Refresh in Ruby Mechanize

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107718: CVE-2026-107718: Open Redirect Vulnerability in @adonisjs/http-server
cverports profile

CVE-2026-107718: CVE-2026-107718: Open Redirect Vulnerability in @adonisjs/http-server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107725: CVE-2026-107725: Remote Code Execution via Authorization Bypass in Hazelcast Predicates API
cverports profile

CVE-2026-107725: CVE-2026-107725: Remote Code Execution via Authorization Bypass in Hazelcast Predicates API

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-107396: CVE-2026-107396: Stored Cross-Site Scripting (XSS) in Indico
cverports profile

CVE-2026-107396: CVE-2026-107396: Stored Cross-Site Scripting (XSS) in Indico

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107397: CVE-2026-107397: Stored Cross-Site Scripting via Collaborative Editor Conflict Resolution and Custom Link Fields in Indico
cverports profile

CVE-2026-107397: CVE-2026-107397: Stored Cross-Site Scripting via Collaborative Editor Conflict Resolution and Custom Link Fields in Indico

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107395: CVE-2026-107395: Missing Authorization in Indico Legacy Session Export API
cverports profile

CVE-2026-107395: CVE-2026-107395: Missing Authorization in Indico Legacy Session Export API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107394: CVE-2026-107394: Server-Side Request Forgery Bypass via Parser Differential in Indico
cverports profile

CVE-2026-107394: CVE-2026-107394: Server-Side Request Forgery Bypass via Parser Differential in Indico

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107717: CVE-2026-107717: Chat Role Injection and Prompt Boundary Bypass in Banks Library
cverports profile

CVE-2026-107717: CVE-2026-107717: Chat Role Injection and Prompt Boundary Bypass in Banks Library

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107716: CVE-2026-107716: Path Traversal and Link Following in banks DirectoryPromptRegistry
cverports profile

CVE-2026-107716: CVE-2026-107716: Path Traversal and Link Following in banks DirectoryPromptRegistry

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107726: CVE-2026-107726: Unrestricted Deserialization in Hazelcast Zero Config Compact Serialization
cverports profile

CVE-2026-107726: CVE-2026-107726: Unrestricted Deserialization in Hazelcast Zero Config Compact Serialization

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107719: CVE-2026-107719: Session Expiration Bypass in fast-jwt via Verifier Cache
cverports profile

CVE-2026-107719: CVE-2026-107719: Session Expiration Bypass in fast-jwt via Verifier Cache

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61427: CVE-2026-61427: Authentication Bypass and Unvalidated Tool Execution in PraisonAI MCP HTTP-Stream Server
cverports profile

CVE-2026-61427: CVE-2026-61427: Authentication Bypass and Unvalidated Tool Execution in PraisonAI MCP HTTP-Stream Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107387: CVE-2026-107387: Uncontrolled Memory Allocation (OOM) in music-metadata APEv2 Parser
cverports profile

CVE-2026-107387: CVE-2026-107387: Uncontrolled Memory Allocation (OOM) in music-metadata APEv2 Parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107391: CVE-2026-107391: Synchronous Infinite Loop and Memory Exhaustion in music-metadata MP4 Parser
cverports profile

CVE-2026-107391: CVE-2026-107391: Synchronous Infinite Loop and Memory Exhaustion in music-metadata MP4 Parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107377: CVE-2026-107377: Arbitrary File Write and Overwrite via Protobuf Weak Import Path Traversal in datamodel-code-generator
cverports profile

CVE-2026-107377: CVE-2026-107377: Arbitrary File Write and Overwrite via Protobuf Weak Import Path Traversal in datamodel-code-generator

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61431: CVE-2026-61431: Arbitrary Local File Read and Path Traversal in PraisonAI ContextGatherer
cverports profile

CVE-2026-61431: CVE-2026-61431: Arbitrary Local File Read and Path Traversal in PraisonAI ContextGatherer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107212: CVE-2026-107212: CPU Exhaustion Denial of Service via Look-Ahead Row Parsing in Excelize
cverports profile

CVE-2026-107212: CVE-2026-107212: CPU Exhaustion Denial of Service via Look-Ahead Row Parsing in Excelize

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105647: CVE-2026-105647: Server-Side Request Forgery via Favicon Probing in Ghost CMS
cverports profile

CVE-2026-105647: CVE-2026-105647: Server-Side Request Forgery via Favicon Probing in Ghost CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-106450: CVE-2026-106450: Denial of Service via Eager Resource Allocation in lz4-java LZ4FrameInputStream
cverports profile

CVE-2026-106450: CVE-2026-106450: Denial of Service via Eager Resource Allocation in lz4-java LZ4FrameInputStream

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-106449: CVE-2026-106449: Stack Overflow via Uncontrolled Recursion in yawkat lz4-java
cverports profile

CVE-2026-106449: CVE-2026-106449: Stack Overflow via Uncontrolled Recursion in yawkat lz4-java

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76485: CVE-2026-76485: Remote Code Execution in Cisco NX-OS VXLAN OAM (NGOAM)
cverports profile

CVE-2026-76485: CVE-2026-76485: Remote Code Execution in Cisco NX-OS VXLAN OAM (NGOAM)

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-106451: CVE-2026-106451: Local Privilege Escalation via JNI Extraction TOCTOU in lz4-java
cverports profile

CVE-2026-106451: CVE-2026-106451: Local Privilege Escalation via JNI Extraction TOCTOU in lz4-java

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105698: CVE-2026-105698: Missing Authorization in Deprecated Chat Vertices Endpoints in Langflow
cverports profile

CVE-2026-105698: CVE-2026-105698: Missing Authorization in Deprecated Chat Vertices Endpoints in Langflow

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105697: CVE-2026-105697: OS Command Injection in Langflow Model Context Protocol Integration
cverports profile

CVE-2026-105697: CVE-2026-105697: OS Command Injection in Langflow Model Context Protocol Integration

#security #cve #cybersecurity
Comments
2 min read
loading...