CVE Vulnerabilities - 24 September 2026

The user‑auth‑info service in SpringBlade versions up to 5.0.2 can be tricked into revealing information about any user by supplying a crafted user ID. This means an attacker on the network could view...

The react-native-debugger tool (versions up to 0.14.0) contains a flaw in its Open in Editor feature that lets an attacker inject operating‑system commands by manipulating a host parameter. This can b...

The littrs library (versions 0.6.1 and 0.6.2) contains a function that can be tricked into using a crafted path to reach files outside its intended folder. An attacker on the network could exploit thi...

The ruoyi-vue-pro web application lets attackers manipulate the file upload function to write files outside the intended folder. This can let a remote user place malicious files on the server, potenti...

The ruoyi-vue-pro application contains a function that accepts a database query string from users. An attacker could send a specially crafted request to make the system execute their own commands, pot...

The AI Knowledge component in ruoyi-vue-pro can be tricked into loading any web address you provide, causing the server to make unauthorized requests. This can be done from anywhere on the internet an...

The web component of volotat Anagnorisis (up to version 0.4.2) lets an attacker specify file paths that go outside the intended folder when using functions like get_file_content, save_file_content, mo...

The MantisZip program (versions up to 0.4.5) can be tricked into using incorrect file paths, letting an attacker reach files outside the intended folder. This could allow a remote user to view or chan...

Versions of Forma LMS up to 4.1.43 let an attacker send specially crafted data to the multi‑user selector feature and cause the system to run unintended database queries. This could allow the attacker...

The MountSegment Request Processing component in kvcache-ai mooncake (versions up to 0.3.14-rc1) does not correctly check who can access certain data segments. Because of this, an attacker on the netw...

The ruoyi-vue-pro application’s OAuth2 client code fails to validate the redirect URL, allowing an attacker to send users to a malicious site after login. This can be triggered from anywhere on the in...

The file upload feature in the ruoyi-vue-pro web application can be tricked into inserting harmful code that runs in a user's browser. An attacker could craft a specially designed file to execute this...

Versions of Excalidraw up to 0.18.1 allow a specially crafted imported file to inject and run code in a user’s browser. An attacker can send such a file remotely, potentially stealing data or taking o...

The Cipher Connection feature in O2OA versions up to 9.5.3 and 10.0.2 can reveal internal file details if an attacker tweaks the fileUrl input. This can be done over the network without needing local ...

The web interface on the Edimax BR-6428nC router can be made to send visitors to a web address of an attacker’s choosing. This could be used to lure users to malicious sites or harvest credentials. Ap...

The login page in Subrion CMS versions up to 4.2.1 can be tricked into sending visitors to a different web address chosen by an attacker. This could be used to lure users to phishing sites or install ...

The mooncake version up to 0.3.12 and 0.3.14‑rc1 contains a flaw in its regular‑expression handling routine that can be triggered from outside the network. An attacker can cause the system to consume ...

The SEMCMS web platform (versions up to 4.2) has a weakness in its image upload feature. An attacker can trick the system into inserting malicious code that runs in a user's browser, potentially steal...

The PaperCut Hive software built into Ricoh printers does not clean up data read from NFC cards before showing it in the screen. Someone with physical access who uses a specially modified NFC card cou...

The Velociraptor tool can stop working if it tries to read a specially crafted prefetch file that is malformed. This could interrupt monitoring or forensic activities that rely on the tool. Update to ...

The Media Filename Handler in volotat Anagnorisis (versions up to 0.4.11) can be tricked into inserting malicious code into web pages when a specially crafted file path is supplied. This could let an ...

The Post Grid plugin for WordPress, versions before 7.9.5, lets users who can edit posts (contributors and higher) add web elements like frames, style tags, or input fields that are normally blocked. ...

The Add User feature in huanzi-qch base-admin does not properly check the username you enter. An attacker can supply a specially crafted name that causes malicious code to run in the browser of anyone...

Versions of BentoPDF up to 2.8.6 let a crafted workflow specify any timestamp server URL. When the workflow runs, the tool sends a fingerprint of the PDF to that URL, letting an attacker learn which d...

Certain versions of IBM OpenBMC firmware let a connected server cause the management software to stop working or reveal a small amount of internal memory. This could lead to temporary loss of control ...