Aggregator

Submit #806403 / VDB-360889

Table of ContentsTproxyNATTproxyTProxy (Transparent Proxy)NATNAT (Network Address Trans

A vulnerability identified as critical has been detected in MindsDB up to 26.01. Affected is the function pickle.loads of the component Pickle Handler. The manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2026-7712. The attack is possible to be carried out remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability categorized as critical has been discovered in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byom_handler/proc_wrapper.py of the component Engine Handler. Executing a manipulation can lead to unrestricted upload. This vulnerability is handled as CVE-2026-7711. The attack can be executed remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in YunaiV yudao-cloud up to 3.8.0. It has been rated as critical. This affects the function doFilterInternal of the file JwtAuthenticationTokenFilter.java of the component Ruoyi-Vue-Pro. Performing a manipulation of the argument mock-token results in improper authentication. This vulnerability is known as CVE-2026-7710. Remote exploitation of the attack is possible. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #806827 / VDB-360888

Submit #806822 / VDB-360887

A vulnerability was found in janeczku Calibre-Web up to 0.6.26. It has been declared as critical. The impacted element is the function generate_auth_token of the file cps/kobo_auth.py of the component Endpoint. Such manipulation of the argument user_id leads to improper authorization. This vulnerability is traded as CVE-2026-7709. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #806493 / VDB-360886

Submit #805823 / VDB-360885

A vulnerability was found in Open5GS up to 2.7.7. It has been classified as problematic. The affected element is the function ogs_dbi_subscription_data in the library /lib/dbi/subscription.c of the component UDR. This manipulation of the argument supi_id causes denial of service. This vulnerability appears as CVE-2026-7708. The attack may be initiated remotely. In addition, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was found in Open5GS up to 2.7.7 and classified as problematic. Impacted is the function udr_nudr_dr_handle_subscription_context of the file /src/udr/nudr-handler.c of the component UDR. The manipulation of the argument pei results in denial of service. This vulnerability is reported as CVE-2026-7707. The attack can be launched remotely. Moreover, an exploit is present. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability has been found in Open5GS up to 2.7.7 and classified as problematic. This issue affects the function gmm_handle_service_request of the file /src/amf/gmm-handler.c of the component AMF. The manipulation leads to denial of service. This vulnerability is documented as CVE-2026-7706. The attack can be initiated remotely. Additionally, an exploit exists. The project was informed of the problem early through an issue report but has not responded yet.

最初作为千禧年（Y2K）标志性网站以“Ask Jeeves”之名创立的Ask.com，现已正式宣告关闭。其主页现在写道：“随着 IAC 继续明确其业务重点，我们决定停止包括Ask.com在内的搜索业务

Submit #805701 / VDB-360884

Submit #805700 / VDB-360883

Submit #805699 / VDB-360883

Submit #805698 / VDB-360882

A vulnerability, which was classified as critical, was found in JD Cloud JDCOS 4.5.1.r4518. This vulnerability affects the function set_iptv_info of the file /jdcap of the component Service Interface. Executing a manipulation of the argument vid can lead to command injection. This vulnerability is registered as CVE-2026-7705. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Il Reentrancy Attack è un tipo di vulnerabilità molto pericolosa negli smart contracts in cui un at