Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.5 MEDIUM
CVE-2026-108787 — houtini-ai voice-analyser-mcp collect_corpus crawler.ts fetch server-side request forgery

A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collect_corpus. Performing a manip…

voice-analyser-mcp | Remote | Server-Side Request Forgery
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
6.5 MEDIUM
CVE-2026-108786 — houtini-ai seo-crawler-mcp Crawler CrawlOrchestrator.ts run_seo_audit server-side request…

A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function run_seo_audit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation …

seo-crawler-mcp | Remote | Server-Side Request Forgery
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
6.5 MEDIUM
CVE-2026-108785 — macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken s…

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This…

mall | Remote | Authentication
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
6.5 MEDIUM
CVE-2026-108784 — macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error

A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the…

mall | Remote | Injection
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
7.5 HIGH
CVE-2026-108783 — PRVTPRO Amnezia-Web-Panel Backup Download app.py default credentials

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The manipulation leads to …

amnezia-web-panel | Remote | Authentication
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
6.5 MEDIUM
CVE-2026-108782 — erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql i…

A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common…

jeewms | Remote | Injection
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
6.5 MEDIUM
CVE-2026-108781 — erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injec…

A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/contr…

jeewms | Remote | Injection
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
6.5 MEDIUM
CVE-2026-108779 — erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection

A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController…

jeewms | Remote | Injection
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
6.5 MEDIUM
CVE-2026-108778 — erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list…

A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of …

jeewms | Remote | Injection
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
6.5 MEDIUM
CVE-2026-108777 — erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection

A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipu…

jeewms | Remote | Injection
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
6.5 MEDIUM
CVE-2026-108775 — erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql inj…

A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java o…

jeewms | Remote | Injection
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
6.5 MEDIUM
CVE-2026-108774 — erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Ex…

jeewms | Remote | Injection
Oct 12, 2026 Oct 12, 2026
Oct 12, 2026
Oct 12, 2026
6.5 MEDIUM
CVE-2026-108773 — erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection

A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a man…

jeewms | Remote | Injection
Oct 11, 2026 Oct 11, 2026
Oct 11, 2026
Oct 11, 2026
5.5 MEDIUM
CVE-2026-108772 — bleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversal

A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoi…

abstruse | Remote | Path Traversal
Oct 11, 2026 Oct 11, 2026
Oct 11, 2026
Oct 11, 2026
6.9 MEDIUM
CVE-2026-108770 — Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery

A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the compon…

appwrite | Remote | Server-Side Request Forgery
Oct 11, 2026 Oct 11, 2026
Oct 11, 2026
Oct 11, 2026
5.5 MEDIUM
CVE-2026-108978 — Samsung rlottie Heap-based Buffer Overflow

Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9.

| Memory Corruption
Oct 11, 2026 Oct 11, 2026
Oct 11, 2026
Oct 11, 2026
4.3 MEDIUM
CVE-2026-108769 — zhayujie CowAgent Markdown Rendering Markdown.tsx denial of service

A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of …

cowagent | Remote | Denial of Service
Oct 11, 2026 Oct 11, 2026
Oct 11, 2026
Oct 11, 2026
7.8 HIGH
CVE-2026-108976 — GNU Emacs TRAMP OS Command Injection

GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an…

emacs | Injection
Oct 11, 2026 Oct 11, 2026
Oct 11, 2026
Oct 11, 2026
8.8 HIGH
CVE-2026-108963 — Databasement Argument Injection Remote Code Execution

databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --resul…

databasement | Remote | Injection
Oct 11, 2026 Oct 11, 2026
Oct 11, 2026
Oct 11, 2026
6.1 MEDIUM
CVE-2026-108925 — Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Bas…

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Co…

Remote | Cross-Site Scripting
Oct 11, 2026 Oct 11, 2026
Oct 11, 2026
Oct 11, 2026
Showing 20 of 13687 Results