CVE Vulnerabilities - 11 October 2026

The JEEWMS system from erzhongxmu lets an attacker send specially crafted data to the docheck function, causing the underlying database to execute unintended commands. This can be done over the networ...

The LiteLLM version up to 1.94.0 can let someone with a crafted API key read hidden data through the get_secret function. This can be done from anywhere on the internet, so confidential information co...

The View Engine component in Furion .NET Framework (versions up to 4.9.9.95) fails to properly filter special characters in template content, allowing attackers to inject malicious code. This can be t...

The Furion .NET Framework (versions up to 4.9.9.92) contains a function that mishandles user input, letting attackers insert malicious SQL commands. This can be triggered from outside the network and ...

The elvix-sdk library (versions up to 0.10.1) can be tricked into sending unauthorized requests to other servers when a specially crafted file path is provided. This means an attacker could make your ...

The UserProxyAgent component in ag2ai ag2 up to version 0.13.4 does not properly check file names, allowing an attacker to supply specially crafted paths that move outside the intended folder. This re...

Versions of highwarden Super Store Finder up to 3.8 let an attacker send specially crafted latitude or longitude values to the index.php page, causing the system to run unintended database commands. T...

The MP4Box tool in GPAC versions up to 26.07.0 contains a coding error that can be triggered from the network, causing the program to use memory that has already been released. This can lead to the ap...

The upload feature in CowAgent's web console can be forced to stop working, making the service unavailable. This can be triggered from outside the network and the attack method is publicly known. Upda...

The Deep Chat version 2.5.1 web interface does not properly check links written in Markdown, so an attacker can insert a link that runs JavaScript when someone clicks it. This can happen in AI respons...

The Add Remote Node API in Studio‑Saelix Sencho (versions up to 0.97.1) does not properly check URLs entered by users with node‑management rights. This lets an attacker cause the server to send its ow...

The CowAgent program (versions up to 2.2.0) has a flaw in its Markdown display component that lets an attacker send specially crafted data and cause the application to stop working. This can be done o...

The CowAgent software (versions up to 2.2.0) can be triggered from a distance to consume excessive system resources when it processes specially crafted JSON data in its streaming tool-call handler. Th...

The CowAgent Web Console (up to version 2.1.7) can be forced to stop working when a specially crafted session_id is sent to the web_channel component. An attacker from anywhere on the internet could u...

The Casdoor system (versions up to 3.164.0 and 4.10.0) can be tricked into sending internal network requests when a specially crafted URL is provided to its proxy validation feature. This could let an...

The billing module in InstantSoft icms2 (up to version 2.18.2) does not properly verify certain PayPal request parameters, so a remote attacker could trick the system into accepting false payment info...

Versions of UnicomAI Wanwu up to 0.6.5 let a logged‑in user generate access keys that are tied to another person's server. This lets the attacker open sessions and run tools on the victim’s server as ...

The open-computer-use tool saves command transcripts to a file called log.html without cleaning the data. If an attacker can influence what appears in the transcript, they can insert hidden code that ...

The Zbus proxy agent’s inter‑process communication code may read past the end of a data structure when it logs an invalid message. This can cause parts of the system’s memory to appear in log output, ...

The CloudBeaver web interface (up to version 25.3.5) does not properly check who is allowed to access exported large‑object files. As a result, anyone with a valid session could download files that be...

The citation-checker feature in Shepherd 0.3.1 can be tricked into contacting internal web services when an attacker supplies a specially crafted URL and controls its DNS records. This lets the attack...

The Dokan marketplace plugin for WordPress does not check who is asking for commission details, so a seller can request and see the commission rate and fixed fee set for another seller. This could rev...

In Squadeno versions before 1.12.0, users with the basic Trainer role can edit fields they shouldn't, such as section, age group, author, password, comment settings and date for sports they manage. Th...

The Envira Gallery add‑on for WordPress does not check whether a visitor is allowed to see a gallery before showing it. As a result, an author can unknowingly make a non‑public gallery’s details visib...

The Envira Gallery add‑on for WordPress (versions before 1.16.2) does not verify that a user has permission to create its own gallery content. As a result, users with only contributor rights can publi...