*** GMail and Validation-Mails *** There seems to be an issue that Gmail is not accepting mails from my server. The reason is that I am currently rebuilding my server infrastructure and the MX-entries are not correctly set. I have activated the accounts using a Gmail-address manually. If you do not receive the validation mail, drop me a note to k.e.klingner@gmail.com.
A vulnerability, which was classified as critical, has been found in gabehf Koito up to 0.3.2. This vulnerability affects unknown code of the file /apis/web/v1/album/{id}/image of the component Image Endpoint. Performin…
vuldb
A vulnerability classified as problematic was found in lobehub lobe-chat up to 2.2.13. This affects an unknown part of the component Avatar Upload Handler. Such manipulation leads to cross site scripting. This vulnerabi…
vuldb
A vulnerability classified as problematic has been found in Fastschema up to 0.15.1. Affected by this issue is the function pkg/rclonefs/base.go.PutMultipart of the file pkg/rclonefs/base.go of the component File Upload…
vuldb
A vulnerability described as problematic has been identified in phoenixframework phoenix_live_view up to 1.2.8. Affected by this vulnerability is the function validate_local_url of the file lib/phoenix_live_view.ex of t…
vuldb
A vulnerability marked as problematic has been reported in fastschema up to 0.15.1. Affected is the function sendOTPEmail of the file pkg/auth/local.go. The manipulation leads to null pointer dereference. This vulnerabi…
vuldb
A vulnerability labeled as problematic has been found in GIMP. This impacts an unknown function of the component file-fli. Executing a manipulation can lead to integer overflow. This vulnerability appears as CVE-2026-59…
vuldb
A vulnerability identified as critical has been detected in alseambusher crontab-ui up to 0.4.2. This affects an unknown function. Performing a manipulation of the argument env_vars results in os command injection. This…
vuldb
A vulnerability categorized as critical has been discovered in alseambusher crontab-ui up to 0.4.2. The impacted element is the function makeCommand of the file crontab.js. Such manipulation of the argument hook leads t…
vuldb
A vulnerability was found in Bluewave Labs Checkmate up to 2.1.0. It has been rated as problematic. The affected element is an unknown function of the file /api/v1/auth/recovery/request. This manipulation causes informa…
vuldb
A vulnerability was found in CoreBunch Instatic up to 0.0.14. It has been declared as problematic. Impacted is an unknown function of the file /_instatic/hole of the component Render Cache. The manipulation of the argum…
vuldb
A vulnerability was found in frangoteam FUXA up to 1.3.3. It has been classified as problematic. This issue affects the function isSocketAdminAuthorized of the file server/runtime/index.js of the component DAQ_QUERY Han…
vuldb
A vulnerability was found in Grafana Labs Grafana up to 13.2.0 and classified as problematic. This vulnerability affects unknown code of the file pkg/services/ngalert/provisioning/contactpoints.go of the component Delet…
vuldb
A vulnerability has been found in fastschema up to 0.15.1 and classified as critical. This affects the function verifyOTPSession of the file pkg/auth/local.go of the component OTP Verification. Performing a manipulation…
vuldb
A vulnerability, which was classified as critical, was found in dulldusk phpfm up to 1.8.0. Affected by this issue is some unknown functionality. Such manipulation of the argument upload_ext_filter leads to unrestricted…
vuldb
A vulnerability, which was classified as critical, has been found in dulldusk phpfm up to 1.8.0. Affected by this vulnerability is an unknown functionality of the file index.php. This manipulation of the argument auth_p…
vuldb
A vulnerability classified as problematic was found in cube-root directory-serve up to 1.3.7. Affected is an unknown function of the file lib/helper/html.js of the component Filename Handler. The manipulation results in…
vuldb
A vulnerability classified as problematic has been found in mustafaakin cast-localvideo. This impacts the function res.sendFile of the file app.js. The manipulation of the argument dir leads to path traversal. This vuln…
vuldb
A vulnerability described as critical has been identified in duhow xiaoai-patch. This affects an unknown function of the file api/main.py of the component Auth Endpoint. Executing a manipulation of the argument url can …
vuldb
A vulnerability marked as very critical has been reported in NASA Fprime-gds up to 3.4.3. The impacted element is an unknown function of the file src/fprime_gds/flask/app.py of the component Flask Application. Performin…
vuldb
A vulnerability labeled as problematic has been found in automatisch. The affected element is an unknown function of the file packages/backend/src/apps/http-request/actions/custom-request/index.js of the component Custo…
vuldb
A vulnerability identified as critical has been detected in Daptin up to 0.12.34. Impacted is the function CanRead/CanPeek/CanCreate/CanUpdate/CanDelete/CanRefer of the file server/permission/permission.go of the compon…
vuldb
A vulnerability categorized as critical has been discovered in 4xmen pm2panel. This issue affects the function exec of the file pm2panel.js of the component Handler. The manipulation of the argument ID results in os com…
vuldb
A vulnerability was found in o1lab xmysql. It has been rated as problematic. This vulnerability affects the function path.join of the file lib/xapi.js of the component xapi. The manipulation of the argument Name leads t…
vuldb
A vulnerability was found in Redis up to 8.8.1. It has been declared as critical. This affects the function getPingExtLength of the component Cluster Bus Message Parser. Executing a manipulation can lead to out-of-bound…
vuldb
A vulnerability was found in duhow xiaoai-patch. It has been classified as critical. Affected by this issue is the function os.system of the file api/main.py of the component Endpoint Handler. Performing a manipulation …
vuldb
A vulnerability was found in NASA HyperCP and classified as critical. Affected by this vulnerability is an unknown functionality of the file Source/OBPGSession.py of the component Handler. Such manipulation leads to os …
vuldb
A vulnerability has been found in cube-root directory-serve up to 1.3.7 and classified as critical. Affected is an unknown function of the file lib/middleware/file-remove.js. This manipulation of the argument File cause…
vuldb
A vulnerability, which was classified as critical, was found in Tencent APIJSON up to 8.1.8. This impacts an unknown function of the file AbstractSQLConfig.java of the component Per-role Allow-list Check. The manipulati…
vuldb
A vulnerability, which was classified as critical, has been found in fosrl Pangolin up to 1.20.0. This affects the function verifyResourceAccessToken of the file server/routers/resource/authWithAccessToken.ts of the com…
vuldb
A vulnerability classified as critical was found in Red Hat GIMP. The impacted element is an unknown function of the component Seattle Filmworks File Loader. Executing a manipulation can lead to heap-based buffer overfl…
vuldb
A vulnerability classified as very critical has been found in AsyncFuncAI deepwiki-open. The affected element is an unknown function of the file api/api.py. Performing a manipulation of the argument owner/repo/repo_type…
vuldb
A vulnerability described as problematic has been identified in FreePBX 17.0. Impacted is an unknown function of the file amp_conf/htdocs/admin/libraries/BMO/Ajax.class.php of the component Ajax. Such manipulation leads…
vuldb
A vulnerability marked as problematic has been reported in Bludit 4.0.0-beta. This issue affects the function Filesystem::mv of the file bl-kernel/ajax/logo-upload.php of the component Upload Endpoint. This manipulation…
vuldb
A vulnerability labeled as critical has been found in picocms Pico up to 2.1.4. This vulnerability affects the function Pico::getBaseUrl of the file lib/Pico.php of the component Base URL. The manipulation results in in…
vuldb
Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um vertrauliche Informationen offenzulegen, Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder seine Rechte zu erweitern.
BSI CERT Security Advisory
Ein Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu um…
BSI CERT Security Advisory
Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.
BSI CERT Security Advisory
Ein Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand herbeizuf…
BSI CERT Security Advisory
A vulnerability identified as problematic has been detected in WP Health Umbrella Plugin up to 2.26.2 on WordPress. This affects an unknown part. The manipulation leads to cross-site request forgery. This vulnerability …
vuldb
A vulnerability categorized as critical has been discovered in GNU Emacs up to 30.2. Affected by this issue is the function sfnt_vary_simple_glyph/sfnt_vary_compound_glyph of the file src/sfnt.c of the component Gvar Ta…
vuldb
A vulnerability was found in GNU Emacs up to 30.2. It has been rated as critical. Affected by this vulnerability is the function sfnt_read_table_directory of the file src/sfnt.c of the component Font Parser. Performing …
vuldb
A vulnerability was found in GNU Emacs. It has been declared as critical. Affected is the function sfnt_read_name_table of the file src/sfnt.c of the component Font Handler. Such manipulation leads to integer overflow. …
vuldb
A vulnerability was found in GNU Emacs up to 30.2. It has been classified as critical. This impacts the function sfnt_read_cmap_format_12 of the file src/sfnt.c of the component TrueType Font Processing. This manipulati…
vuldb
A vulnerability was found in GNU Cpio up to 2.15 and classified as critical. This affects an unknown function of the component Archive Member Listing. The manipulation results in injection. This vulnerability is catalog…
vuldb
A vulnerability has been found in GNU Cpio up to 2.15 and classified as problematic. The impacted element is the function link_to_name of the component Tar Archive Extraction. The manipulation leads to path traversal. T…
vuldb
A vulnerability, which was classified as problematic, was found in GNU cpio up to 2.15. The affected element is the function make_path of the file src/makepath.c. Executing a manipulation can lead to stack-based buffer …
vuldb
A vulnerability, which was classified as critical, has been found in Fabrikar Fabrik Extension 1.0.0-4.6.6. Impacted is an unknown function. Performing a manipulation results in code injection. This vulnerability is ide…
vuldb
A vulnerability classified as critical was found in Red Hat Directory Server. This issue affects some unknown processing of the component CleanAllRUV. Such manipulation leads to improper authorization. This vulnerabilit…
vuldb
A vulnerability classified as problematic has been found in ECOVACS ROBOTICS ECOVACS PRO App up to 1.3.81. This vulnerability affects unknown code. This manipulation causes improper certificate validation. The identific…
vuldb
A vulnerability described as problematic has been identified in Samsung SmartThings. This affects an unknown part. The manipulation results in improper access controls. This vulnerability was named CVE-2026-21084. The a…
vuldb
A vulnerability marked as very critical has been reported in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation le…
vuldb
A vulnerability labeled as problematic has been found in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC. Affected by this vulnerability is an unknown functionality of the component Web Server. Executing a manipulat…
vuldb
A vulnerability identified as problematic has been detected in Samsung Smart Switch 3.7.64.10/3.7.66.6/3.7.67.2/3.7.68.6/3.7.69.15. Affected is an unknown function. Performing a manipulation results in improper input va…
vuldb
A vulnerability categorized as problematic has been discovered in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC. This impacts an unknown function. Such manipulation leads to improper certificate validation. This v…
vuldb
A vulnerability was found in Ecovacs Robotics DEEBOT PRO M1 and DEEBOT PRO K1VAC. It has been rated as very critical. This affects an unknown function. This manipulation causes weak password requirements. This vulnerabi…
vuldb
A vulnerability was found in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC. It has been declared as critical. The impacted element is an unknown function of the component Wi-Fi Hotspot. The manipulation results in…
vuldb
A vulnerability was found in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC. It has been classified as very critical. The affected element is an unknown function. The manipulation leads to channel accessible by non…
vuldb
A vulnerability was found in Ecovacs Robotics DEEBOT PRO M1 and DEEBOT PRO K1VAC and classified as problematic. Impacted is an unknown function. Executing a manipulation can lead to improper certificate validation. This…
vuldb
A vulnerability has been found in ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC and classified as critical. This issue affects some unknown processing of the component Websocket. Performing a manipulation results …
vuldb
A vulnerability, which was classified as problematic, was found in Samsung Devices. This vulnerability affects unknown code of the component AppLock. Such manipulation leads to improper export of android application com…
vuldb