Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
5.3 MEDIUM
CVE-2026-108788 — deepseek-ai deepseek-harness Sandbox spawn sandbox

A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile …

deepseek-harness | Misconfiguration
Oct 12, 2026 Oct 14, 2026
Oct 12, 2026
Oct 14, 2026
6.5 MEDIUM
CVE-2026-108787 — houtini-ai voice-analyser-mcp collect_corpus crawler.ts fetch server-side request forgery

A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collect_corpus. Performing a manip…

voice-analyser-mcp | Remote | Server-Side Request Forgery
Oct 12, 2026 Oct 13, 2026
Oct 12, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-108786 — houtini-ai seo-crawler-mcp Crawler CrawlOrchestrator.ts run_seo_audit server-side request…

A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function run_seo_audit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation …

seo-crawler-mcp | Remote | Server-Side Request Forgery
Oct 12, 2026 Oct 15, 2026
Oct 12, 2026
Oct 15, 2026
6.5 MEDIUM
CVE-2026-108785 — macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken s…

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This…

mall | Remote | Authentication
Oct 12, 2026 Oct 13, 2026
Oct 12, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-108784 — macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error

A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the…

mall | Remote | Injection
Oct 12, 2026 Oct 14, 2026
Oct 12, 2026
Oct 14, 2026
7.5 HIGH
CVE-2026-108783 — PRVTPRO Amnezia-Web-Panel Backup Download app.py default credentials

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The manipulation leads to …

amnezia-web-panel | Remote | Authentication
Oct 12, 2026 Oct 13, 2026
Oct 12, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-108782 — erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql i…

A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common…

jeewms | Remote | Injection
Oct 12, 2026 Oct 15, 2026
Oct 12, 2026
Oct 15, 2026
6.5 MEDIUM
CVE-2026-108781 — erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injec…

A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/contr…

jeewms | Remote | Injection
Oct 12, 2026 Oct 13, 2026
Oct 12, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-108779 — erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection

A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController…

jeewms | Remote | Injection
Oct 12, 2026 Oct 14, 2026
Oct 12, 2026
Oct 14, 2026
6.5 MEDIUM
CVE-2026-108778 — erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list…

A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of …

jeewms | Remote | Injection
Oct 12, 2026 Oct 13, 2026
Oct 12, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-108777 — erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection

A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipu…

jeewms | Remote | Injection
Oct 12, 2026 Oct 15, 2026
Oct 12, 2026
Oct 15, 2026
6.5 MEDIUM
CVE-2026-108775 — erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql inj…

A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java o…

jeewms | Remote | Injection
Oct 12, 2026 Oct 13, 2026
Oct 12, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-108774 — erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Ex…

jeewms | Remote | Injection
Oct 12, 2026 Oct 14, 2026
Oct 12, 2026
Oct 14, 2026
6.5 MEDIUM
CVE-2026-108773 — erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection

A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a man…

jeewms | Remote | Injection
Oct 11, 2026 Oct 13, 2026
Oct 11, 2026
Oct 13, 2026
5.5 MEDIUM
CVE-2026-108772 — bleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversal

A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoi…

abstruse | Remote | Path Traversal
Oct 11, 2026 Oct 15, 2026
Oct 11, 2026
Oct 15, 2026
6.9 MEDIUM
CVE-2026-108770 — Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery

A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the compon…

appwrite | Remote | Server-Side Request Forgery
Oct 11, 2026 Oct 13, 2026
Oct 11, 2026
Oct 13, 2026
Showing 20 of 18876 Results