https://junglewise.ai/threats/serialize-javascript-code-injection-via-regexp-flags-and-date-a4d4abae2026-09-25 https://junglewise.ai/threats/fasterxml-jackson-core-dos-via-number-length-limit-bypass-in-async-904e648b2026-08-03 https://junglewise.ai/threats/cve-2026-28517-opendcim-os-command-injection-in-report-network-map-php2026-07-14 https://junglewise.ai/threats/cve-2026-28516-opendcim-sql-injection-in-config-updateparameter2026-07-14 https://junglewise.ai/threats/cve-2026-28515-opendcim-missing-authorization-in-install-php2026-07-14 https://junglewise.ai/threats/cve-2026-28406-google-kaniko-path-traversal-in-tar-extraction2026-06-30 https://junglewise.ai/threats/cve-2026-32898-openclaw-acp-client-permission-auto-approval-bypass-via-untrusted2026-09-25 https://junglewise.ai/threats/cve-2026-4039-openclaw-environment-variable-injection-in-skill-config2026-09-25 https://junglewise.ai/threats/cve-2026-27638-actual-budget-sync-server-missing-authorization-in-sync-endpoints2026-09-25 https://junglewise.ai/threats/cve-2026-2880-fastify-fastify-middie-auth-bypass-via-improper-path-normalization2026-09-25 https://junglewise.ai/threats/cve-2026-26861-clevertap-web-sdk-dom-based-xss-in-postmessage-handler2026-09-25 https://junglewise.ai/threats/cve-2026-26862-clevertap-web-sdk-dom-based-xss-via-postmessage-origin-bypass2026-09-25 https://junglewise.ai/threats/nestjs-platform-fastify-authentication-bypass-via-url-normalization-7f9dc4ea2026-09-25 https://junglewise.ai/threats/cve-2026-2293-nestjs-auth-bypass-in-nestjs-platform-fastify2026-09-25 https://junglewise.ai/threats/cve-2026-3304-expressjs-multer-denial-of-service-via-incomplete-cleanup2026-09-25 https://junglewise.ai/threats/cve-2026-2359-expressjs-multer-denial-of-service-via-resource-exhaustion2026-09-25 https://junglewise.ai/threats/cve-2026-27966-langflow-csv-agent-remote-code-execution-via-hardcoded-python2026-09-26 https://junglewise.ai/threats/cve-2025-10990-ruby-rexml-redos-in-hex-numeric-character-references2026-06-26 https://junglewise.ai/threats/cve-2025-11950-knowhy-eduasist-reflected-xss2026-06-04 https://junglewise.ai/threats/cve-2025-11252-signum-technology-windesk-fm-sql-injection2026-06-04 https://junglewise.ai/threats/cve-2026-24352-pluxml-cms-session-fixation-in-authentication-module2026-05-19 https://junglewise.ai/threats/cve-2026-24351-pluxml-cms-stored-xss-in-static-pages-editing-functionality2026-05-19 https://junglewise.ai/threats/cve-2026-24350-pluxml-cms-stored-xss-via-svg-file-upload2026-05-22 https://junglewise.ai/threats/cve-2025-11251-dayneks-e-commerce-platform-sql-injection2026-06-04 https://junglewise.ai/threats/cve-2026-21660-johnson-controls-frick-controls-quantum-hd-plaintext-password2026-09-25 https://junglewise.ai/threats/cve-2025-12150-keycloak-webauthn-attestation-policy-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-28363-openclaw-authorization-bypass-via-sort-long-option-abbreviation2026-09-25 https://junglewise.ai/threats/cve-2026-28364-ocaml-marshal-deserialization-buffer-over-read-in-runtime-intern2026-06-30 https://junglewise.ai/threats/cve-2026-20797-a-stack-based-buffer-overflow-exists-in-an-api-route-of-xweb-pro2026-05-10 https://junglewise.ai/threats/cve-2026-25109-copeland-xweb-pro-os-command-injection-in-get-setup-route2026-06-04 https://junglewise.ai/threats/cve-2026-20910-copeland-xweb-pro-os-command-injection-in-firmware-update-action2026-06-04 https://junglewise.ai/threats/cve-2026-27942-naturalintelligence-fast-xml-parser-stack-overflow-in-xmlbuilder2026-09-25 https://junglewise.ai/threats/cve-2026-27902-svelte-xss-via-html-comment-injection-in-ssr-error-boundary2026-09-25 https://junglewise.ai/threats/cve-2026-27901-svelte-xss-in-ssr-with-contenteditable-bind-innertext-and-bind2026-09-25 https://junglewise.ai/threats/cve-2026-27903-minimatch-redos-in-matchone-via-multiple-non-adjacent-globstar2026-09-25 https://junglewise.ai/threats/cve-2026-27904-isaacs-minimatch-redos-in-nested-extglobs2026-09-24 https://junglewise.ai/threats/cve-2026-27509-unitree-go2-missing-dds-authentication-in-actuator-manager-py2026-05-26 https://junglewise.ai/threats/cve-2026-27837-dottie-prototype-pollution-bypass-in-set-and-transform2026-09-25 https://junglewise.ai/threats/cve-2026-26227-videolan-vlc-for-android-authentication-bypass-in-remote-access2026-07-14 https://junglewise.ai/threats/cve-2026-23750-golioth-pouch-heap-overflow-in-ble-gatt-certificate-handling2026-07-14 https://junglewise.ai/threats/cve-2026-23749-golioth-firmware-sdk-out-of-bounds-read-in-blockwise-transfer2026-07-14 https://junglewise.ai/threats/cve-2026-23748-golioth-firmware-sdk-out-of-bounds-read-in-lightdb-state-string2026-07-14 https://junglewise.ai/threats/cve-2026-23747-golioth-firmware-sdk-stack-buffer-overflow-in-payload-utils2026-07-14 https://junglewise.ai/threats/cve-2026-26228-videolan-vlc-for-android-path-traversal-in-remote-access-server2026-07-14 https://junglewise.ai/threats/cve-2025-71057-d-link-dsl-124-session-hijacking-via-ip-spoofing2026-07-05 https://junglewise.ai/threats/cve-2026-27818-terriajs-server-domain-validation-bypass-in-proxy-allowlist2026-09-25 https://junglewise.ai/threats/cve-2026-27809-psd-tools-compression-module-unguarded-zlib-decompression-and2026-09-26 https://junglewise.ai/threats/cve-2025-14343-dokuzsoft-e-commerce-product-reflected-xss2026-06-04 https://junglewise.ai/threats/cve-2026-1698-arc-informatique-pcvue-http-host-header-attack-in-webclient-and2026-07-09 https://junglewise.ai/threats/cve-2026-1697-arc-informatique-pcvue-missing-cookie-attributes-in-webclient2026-07-09 https://junglewise.ai/threats/cve-2026-1696-arc-informatique-pcvue-improper-http-security-headers2026-07-09 https://junglewise.ai/threats/cve-2026-1695-arc-informatique-pcvue-xss-in-oauth-web-services2026-07-09 https://junglewise.ai/threats/cve-2026-1694-arc-informatique-pcvue-information-exposure-via-default-http2026-07-09 https://junglewise.ai/threats/cve-2026-1693-arc-informatique-pcvue-use-of-deprecated-oauth-ropc-flow2026-07-09 https://junglewise.ai/threats/cve-2026-1692-arc-informatique-pcvue-missing-origin-validation-in-websockets2026-07-09 https://junglewise.ai/threats/cve-2026-27970-google-angular-xss-in-internationalization-icu-messages2026-09-25 https://junglewise.ai/threats/cve-2026-27959-koa-host-header-injection-in-ctx-hostname-api2026-09-25 https://junglewise.ai/threats/cve-2026-27896-model-context-protocol-go-sdk-improper-case-sensitivity-in-json2026-06-30 https://junglewise.ai/threats/cve-2026-27830-swaldman-c3p0-insecure-deserialization-in-useroverridesasstring2026-06-30 https://junglewise.ai/threats/cve-2026-27577-n8n-code-injection-in-expression-evaluation2026-09-25 https://junglewise.ai/threats/cve-2026-27804-parse-server-jwt-algorithm-confusion-in-google-auth-adapter2026-09-25 https://junglewise.ai/threats/cve-2026-27795-langchain-community-ssrf-bypass-via-redirect-chaining-in2026-09-25 https://junglewise.ai/threats/cve-2026-27739-angular-ssr-ssrf-and-header-injection-in-request-handling2026-09-25 https://junglewise.ai/threats/cve-2026-27738-angular-ssr-open-redirect-via-x-forwarded-prefix-header2026-09-25 https://junglewise.ai/threats/cve-2026-27699-basic-ftp-path-traversal-in-downloadtodir2026-09-25 https://junglewise.ai/threats/cve-2026-27729-astro-memory-exhaustion-dos-in-server-actions2026-09-25 https://junglewise.ai/threats/cve-2026-27578-n8n-stored-xss-in-various-nodes2026-09-25 https://junglewise.ai/threats/cve-2026-27148-storybook-websocket-hijacking-and-rce-in-development-server2026-09-25 https://junglewise.ai/threats/cve-2026-27498-n8n-arbitrary-command-execution-via-file-write-and-git-operations2026-09-25 https://junglewise.ai/threats/cve-2026-27497-n8n-remote-code-execution-via-merge-node2026-09-25 https://junglewise.ai/threats/cve-2026-27495-n8n-javascript-task-runner-sandbox-escape2026-09-25 https://junglewise.ai/threats/cve-2026-27494-n8n-python-code-node-sandbox-escape2026-09-25 https://junglewise.ai/threats/cve-2026-27493-n8n-unauthenticated-expression-injection-via-form-node2026-09-25 https://junglewise.ai/threats/cve-2026-26965-freerdp-heap-out-of-bounds-write-in-rle-planar-decode-path2026-06-30 https://junglewise.ai/threats/cve-2026-26955-freerdp-heap-buffer-overflow-in-gdi-surface-pipeline-clearcodec2026-06-30 https://junglewise.ai/threats/cve-2026-27696-changedetection-io-server-side-request-forgery-via-watch-urls2026-09-26 https://junglewise.ai/threats/cve-2026-27702-budibase-remote-code-execution-via-unsafe-eval-in-view-filters2026-09-25 https://junglewise.ai/threats/cve-2026-27732-avideo-authenticated-ssrf-in-avideoencoder-json-php2026-09-25 https://junglewise.ai/threats/cve-2026-25138-rucio-webui-username-enumeration-via-login-error-message2026-09-26 https://junglewise.ai/threats/cve-2026-22866-ens-dnssec-oracle-rsa-signature-forgery-via-missing-pkcs-1-v1-52026-09-25 https://junglewise.ai/threats/cve-2026-25554-opensips-sql-injection-in-auth-jwt-module2026-07-14 https://junglewise.ai/threats/cve-2026-27829-astro-ssrf-in-remote-image-infersize2026-09-25 https://junglewise.ai/threats/cve-2026-27728-oneuptime-probe-os-command-injection-in-networkpathmonitor2026-09-25 https://junglewise.ai/threats/cve-2026-27700-hono-authentication-bypass-by-ip-spoofing-in-aws-lambda-alb2026-09-25 https://junglewise.ai/threats/cve-2026-27597-agentfront-enclave-vm-core-sandbox-escape-leading-to-rce2026-09-25 https://junglewise.ai/threats/cve-2026-27727-mchange-commons-java-remote-code-execution-via-jndi-dereferencing2026-06-30 https://junglewise.ai/threats/cve-2026-20127-cisco-catalyst-sd-wan-auth-bypass-in-peering-authentication2026-06-16 https://junglewise.ai/threats/cve-2026-27628-pypdf-infinite-loop-in-circular-cross-reference-streams2026-09-26 https://junglewise.ai/threats/cve-2026-27621-typicms-core-stored-xss-via-svg-file-upload2026-07-09 https://junglewise.ai/threats/cve-2026-27612-repostat-repocard-reflected-cross-site-scripting-via-repo-prop2026-09-25 https://junglewise.ai/threats/cve-2026-2624-epati-antikor-ngfw-authentication-bypass-in-critical-functions2026-06-06 https://junglewise.ai/threats/cve-2026-21725-a-time-of-create-to-time-of-use-toctou-vulnerability-lets2026-05-10 https://junglewise.ai/threats/cve-2026-26103-udisks-missing-authorization-in-luks-header-restoration-api2026-06-30 https://junglewise.ai/threats/cve-2026-27610-parse-platform-parse-dashboard-privilege-escalation-in2026-09-25 https://junglewise.ai/threats/cve-2026-27609-parse-community-parse-dashboard-csrf-in-ai-agent-api2026-09-25 https://junglewise.ai/threats/cve-2026-27608-parse-dashboard-missing-authorization-in-ai-agent-api2026-09-25 https://junglewise.ai/threats/cve-2026-27606-rollup-arbitrary-file-write-via-path-traversal2026-09-25 https://junglewise.ai/threats/cve-2026-27595-parse-dashboard-authentication-bypass-in-ai-agent-api2026-09-25 https://junglewise.ai/threats/cve-2022-20775-cisco-sd-wan-privilege-escalation-via-path-traversal-in-cli2026-05-15 https://junglewise.ai/threats/cve-2026-26351-getsimplecms-ce-stored-xss-in-components-php-slug-field2026-07-14 https://junglewise.ai/threats/cve-2026-27584-actualbudget-missing-authentication-in-simplefin-and-pluggy-ai2026-09-25 https://junglewise.ai/threats/cve-2026-27567-payload-server-side-request-forgery-in-external-file-uploads2026-09-25 https://junglewise.ai/threats/cve-2026-27483-mindsdb-path-traversal-in-api-files-leading-to-rce2026-09-26 https://junglewise.ai/threats/cve-2025-69985-fuxa-authentication-bypass-in-jwt-middleware-via-referer-header2026-09-25 https://junglewise.ai/threats/cve-2025-63409-gcom-epon-1ge-privilege-escalation-and-credential-disclosure2026-07-05 https://junglewise.ai/threats/cve-2026-27574-oneuptime-code-injection-in-vm-sandbox-allows-rce2026-09-25 https://junglewise.ai/threats/cve-2026-23982-apache-superset-improper-authorization-in-dataset-access-controls2026-09-26 https://junglewise.ai/threats/cve-2025-67445-totolink-x5000r-denial-of-service-in-cstecgi-cgi2026-07-05 https://junglewise.ai/threats/cve-2026-2807-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-06-30 https://junglewise.ai/threats/cve-2026-2799-mozilla-firefox-and-thunderbird-use-after-free-in-dom-core-html2026-06-30 https://junglewise.ai/threats/cve-2026-2798-mozilla-firefox-and-thunderbird-use-after-free-in-dom-popover2026-06-30 https://junglewise.ai/threats/cve-2026-2797-mozilla-firefox-and-thunderbird-use-after-free-in-javascript-gc2026-06-30 https://junglewise.ai/threats/cve-2026-2796-mozilla-firefox-and-thunderbird-jit-miscompilation-in-webassembly2026-06-30 https://junglewise.ai/threats/cve-2026-2795-mozilla-firefox-and-thunderbird-use-after-free-in-javascript-gc2026-06-30 https://junglewise.ai/threats/cve-2026-2794-mozilla-firefox-uninitialized-memory-disclosure-in-contentparent2026-06-30 https://junglewise.ai/threats/cve-2026-2793-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-06-30 https://junglewise.ai/threats/cve-2026-2792-mozilla-firefox-and-thunderbird-memory-safety-bugs2026-06-30 https://junglewise.ai/threats/cve-2026-2786-use-after-free-in-the-javascript-engine-component-this2026-05-10 https://junglewise.ai/threats/cve-2026-2778-mozilla-firefox-and-thunderbird-sandbox-escape-in-dom-core-html2026-06-30 https://junglewise.ai/threats/cve-2026-2777-mozilla-firefox-and-thunderbird-privilege-escalation-in-messaging2026-06-30 https://junglewise.ai/threats/cve-2026-2776-mozilla-firefox-and-thunderbird-sandbox-escape-in-telemetry2026-06-30 https://junglewise.ai/threats/cve-2026-2775-mozilla-firefox-and-thunderbird-mitigation-bypass-in-dom-html2026-06-30 https://junglewise.ai/threats/cve-2026-2774-mozilla-firefox-and-thunderbird-integer-overflow-in-audio-video2026-06-30 https://junglewise.ai/threats/cve-2026-2773-mozilla-firefox-and-thunderbird-incorrect-boundary-conditions-in2026-06-30 https://junglewise.ai/threats/cve-2026-2772-mozilla-firefox-and-thunderbird-use-after-free-in-audio-video2026-06-30 https://junglewise.ai/threats/cve-2026-2771-mozilla-firefox-and-thunderbird-undefined-behavior-in-dom-core-and2026-06-30 https://junglewise.ai/threats/cve-2026-2770-mozilla-firefox-and-thunderbird-use-after-free-in-dom-bindings2026-06-30 https://junglewise.ai/threats/cve-2026-2769-mozilla-firefox-and-thunderbird-use-after-free-in-indexeddb2026-06-30 https://junglewise.ai/threats/cve-2026-2768-mozilla-firefox-and-thunderbird-sandbox-escape-in-indexeddb2026-06-30 https://junglewise.ai/threats/cve-2026-2767-mozilla-firefox-and-thunderbird-use-after-free-in-webassembly2026-06-30 https://junglewise.ai/threats/cve-2026-2766-mozilla-firefox-and-thunderbird-use-after-free-in-javascript-jit2026-06-30 https://junglewise.ai/threats/cve-2026-2765-mozilla-firefox-and-thunderbird-use-after-free-in-javascript2026-06-30 https://junglewise.ai/threats/cve-2026-2764-mozilla-firefox-and-thunderbird-use-after-free-in-javascript-jit2026-06-30 https://junglewise.ai/threats/cve-2026-2763-mozilla-firefox-and-thunderbird-use-after-free-in-javascript2026-06-30 https://junglewise.ai/threats/cve-2026-2762-mozilla-firefox-and-thunderbird-integer-overflow-in-javascript2026-06-30 https://junglewise.ai/threats/cve-2026-2761-mozilla-firefox-and-thunderbird-sandbox-escape-in-webrender2026-06-30 https://junglewise.ai/threats/cve-2026-2760-mozilla-firefox-and-thunderbird-sandbox-escape-in-webrender2026-06-30 https://junglewise.ai/threats/cve-2026-2759-mozilla-firefox-and-thunderbird-out-of-bounds-read-in-imagelib2026-06-30 https://junglewise.ai/threats/cve-2026-2758-mozilla-firefox-and-thunderbird-use-after-free-in-javascript-gc2026-06-30 https://junglewise.ai/threats/cve-2026-2757-mozilla-firefox-and-thunderbird-oob-write-in-webrtc-audio-video2026-06-30 https://junglewise.ai/threats/cve-2026-1773-hitachi-energy-rtu500-denial-of-service-in-iec-60870-5-1042026-05-26 https://junglewise.ai/threats/cve-2026-3091-synology-presto-client-uncontrolled-search-path-in-installer2026-06-02 https://junglewise.ai/threats/cve-2026-25985-imagemagick-excessive-memory-allocation-in-svg-decoder2026-06-30 https://junglewise.ai/threats/cve-2026-25969-imagemagick-memory-leak-in-coders-ashlar-c2026-06-23 https://junglewise.ai/threats/cve-2026-25968-imagemagick-stack-buffer-overflow-in-msl-c2026-06-23 https://junglewise.ai/threats/cve-2026-25965-imagemagick-path-traversal-policy-bypass-in-path-security-policy2026-06-30 https://junglewise.ai/threats/cve-2026-25794-imagemagick-heap-overflow-in-writeuhdrimage2026-06-30 https://junglewise.ai/threats/cve-2026-25108-soliton-systems-filezen-os-command-injection-in-antivirus-check2026-05-15 https://junglewise.ai/threats/cve-2026-27742-bludit-stored-xss-in-post-content2026-07-14 https://junglewise.ai/threats/cve-2026-27741-bludit-csrf-in-plugin-and-theme-management-endpoints2026-07-14 https://junglewise.ai/threats/cve-2026-25545-astro-server-side-rendering-ssrf-via-host-header-injection2026-09-25 https://junglewise.ai/threats/cve-2025-71056-gcom-epon-1ge-onu-session-hijacking-via-ip-spoofing2026-07-05 https://junglewise.ai/threats/cve-2026-27623-valkey-denial-of-service-via-reachable-assertion-in-resp2026-06-30 https://junglewise.ai/threats/cve-2026-21863-valkey-denial-of-service-via-invalid-clusterbus-packet2026-06-30 https://junglewise.ai/threats/cve-2025-67733-valkey-resp-protocol-injection-in-lua-error-reply2026-06-30 https://junglewise.ai/threats/cve-2025-70058-ymfe-yapi-tls-ssl-certificate-validation-bypass2026-09-25 https://junglewise.ai/threats/cve-2025-14905-red-hat-389-ds-base-heap-buffer-overflow-in-schema-attr-enum2026-06-25 https://junglewise.ai/threats/cve-2026-25747-apache-camel-leveldb-insecure-deserialization-in2026-06-30 https://junglewise.ai/threats/cve-2026-2998-eai-technologies-erp-f2-dll-hijacking2026-07-28 https://junglewise.ai/threats/cve-2026-27134-strimzi-kafka-operator-improper-authentication-in-mtls-ca-chain2026-06-30 https://junglewise.ai/threats/cve-2026-2635-mlflow-authentication-bypass-via-hard-coded-default-credentials2026-09-26 https://junglewise.ai/threats/cve-2026-2492-tensorflow-privilege-escalation-via-uncontrolled-hdf5-plugin2026-06-30 https://junglewise.ai/threats/cve-2026-2048-gnome-gimp-out-of-bounds-write-in-xwd-file-parsing2026-06-30 https://junglewise.ai/threats/cve-2026-2047-gimp-heap-buffer-overflow-in-icns-file-parsing2026-06-30 https://junglewise.ai/threats/cve-2026-2045-gimp-out-of-bounds-write-in-xwd-file-parsing2026-06-30 https://junglewise.ai/threats/cve-2026-2044-gimp-uninitialized-memory-remote-code-execution-in-pgm-parsing2026-06-30 https://junglewise.ai/threats/cve-2026-2033-mlflow-tracking-server-directory-traversal-remote-code-execution2026-09-26 https://junglewise.ai/threats/cve-2019-25434-nsasoft-spotauditor-stack-based-buffer-overflow-in-registration2026-06-29 https://junglewise.ai/threats/cve-2026-0797-gimp-heap-based-buffer-overflow-in-ico-file-parsing2026-06-30 https://junglewise.ai/threats/cve-2026-27576-openclaw-acp-uncontrolled-resource-consumption-in-local-stdio2026-09-25 https://junglewise.ai/threats/cve-2026-25896-naturalintelligence-fast-xml-parser-xss-via-regex-injection-in2026-09-25 https://junglewise.ai/threats/cve-2026-27492-lettermint-node-js-sdk-state-leakage-in-reused-email-client2026-09-25 https://junglewise.ai/threats/cve-2026-27488-openclaw-ssrf-in-cron-webhook-delivery2026-09-25 https://junglewise.ai/threats/cve-2026-27485-openclaw-symlink-following-in-skill-packaging-script2026-09-25 https://junglewise.ai/threats/cve-2026-27484-openclaw-discord-moderation-authorization-bypass-via-untrusted2026-09-25 https://junglewise.ai/threats/cve-2026-2472-google-cloud-vertex-ai-sdk-stored-xss-in-visualization-component2026-06-30 https://junglewise.ai/threats/cve-2025-67438-sync-in-server-stored-cross-site-scripting-in-svg-file-upload2026-09-25 https://junglewise.ai/threats/cve-2026-2818-vmware-spring-data-geode-path-traversal-in-snapshot-import2026-06-30 https://junglewise.ai/threats/cve-2026-27506-sa2blv-svxportal-stored-xss-in-user-profile-update2026-07-14 https://junglewise.ai/threats/cve-2026-27505-sa2blv-svxportal-stored-xss-in-user-registration-workflow2026-07-14 https://junglewise.ai/threats/cve-2026-27504-sa2blv-svxportal-reflected-xss-in-radiomobile-front-php2026-07-14 https://junglewise.ai/threats/cve-2026-27503-sa2blv-svxportal-reflected-xss-in-admin-log-php2026-07-14 https://junglewise.ai/threats/cve-2026-27502-sa2blv-svxportal-reflected-xss-in-log-php2026-07-14 https://junglewise.ai/threats/cve-2026-26725-edu-business-solutions-print-shop-pro-webdesk-privilege2026-05-14 https://junglewise.ai/threats/cve-2025-67972-zoho-zeptomail-missing-authorization-in-wordpress-plugin2026-05-21 https://junglewise.ai/threats/cve-2025-10970-kolay-software-talentics-blind-sql-injection2026-06-05 https://junglewise.ai/threats/cve-2026-21620-erlang-otp-path-traversal-in-tftp-file-module2026-07-24 https://junglewise.ai/threats/cve-2026-2739-indutny-bn-js-infinite-loop-in-maskn-leading-to-denial-of-service2026-09-25 https://junglewise.ai/threats/cve-2026-26980-ghost-cms-sql-injection-in-content-api2026-09-25 https://junglewise.ai/threats/cve-2026-26957-libredesk-intended-ssrf-behavior-in-webhook-configuration2026-06-09 https://junglewise.ai/threats/cve-2025-49113-roundcube-webmail-php-deserialization-in-upload-php2026-05-15 https://junglewise.ai/threats/cve-2025-68461-roundcube-webmail-xss-in-svg-animate-tag2026-05-15 https://junglewise.ai/threats/cve-2026-4040-openclaw-safebins-file-existence-oracle-information-disclosure2026-09-25 https://junglewise.ai/threats/cve-2026-31996-openclaw-safebins-command-injection-via-sort-and-grep-flags2026-09-25 https://junglewise.ai/threats/cve-2026-32060-openclaw-path-traversal-in-apply-patch2026-09-25 https://junglewise.ai/threats/cve-2026-27210-pannellum-xss-vulnerability-in-hot-spot-attributes2026-09-25 https://junglewise.ai/threats/cve-2026-27199-werkzeug-safe-join-allows-windows-special-device-names2026-09-26 https://junglewise.ai/threats/cve-2026-27193-feathers-authentication-oauth-information-disclosure-via2026-09-25 https://junglewise.ai/threats/cve-2026-27192-feathers-authentication-oauth-origin-validation-bypass-via-prefix2026-09-25 https://junglewise.ai/threats/cve-2026-27191-feathers-open-redirect-in-oauth-callback-enables-account-takeover2026-09-25 https://junglewise.ai/threats/svelte-devalue-dos-via-sparse-array-serialization-3093799b2026-09-25 https://junglewise.ai/threats/svelte-devalue-prototype-pollution-via-uneval-14b7c8df2026-09-25 https://junglewise.ai/threats/cve-2026-27125-svelte-ssr-attribute-spreading-prototype-chain-pollution2026-09-25 https://junglewise.ai/threats/cve-2026-27212-swiper-prototype-pollution-via-array-prototype2026-09-25 https://junglewise.ai/threats/cve-2026-27203-ebay-api-mcp-server-environment-variable-injection2026-09-25 https://junglewise.ai/threats/cve-2026-26318-sebhildebrandt-systeminformation-command-injection-in-versions2026-09-25 https://junglewise.ai/threats/cve-2026-26280-sebhildebrandt-systeminformation-command-injection-in2026-09-25 https://junglewise.ai/threats/cve-2026-26278-naturalintelligence-fast-xml-parser-denial-of-service-via-entity2026-09-25 https://junglewise.ai/threats/cve-2026-26200-hdfgroup-hdf5-heap-buffer-overflow-in-h5t-conv-struct-opt2026-06-30 https://junglewise.ai/threats/cve-2026-28479-openclaw-weak-hash-algorithm-in-sandbox-cache2026-09-25 https://junglewise.ai/threats/cve-2026-28394-openclaw-web-fetch-denial-of-service-via-unbounded-response2026-09-25 https://junglewise.ai/threats/cve-2026-26030-microsoft-semantic-kernel-rce-in-inmemoryvectorstore-filter2026-06-09 https://junglewise.ai/threats/go-chi-chi-open-redirect-in-redirectslashes-middleware-700b7eff2026-06-18 https://junglewise.ai/threats/open-babel-out-of-bounds-read-in-cif-file-handler-d79b8a5b2026-06-30 https://junglewise.ai/threats/open-babel-out-of-bounds-read-in-cif-transform3d-917f633e2026-09-26 https://junglewise.ai/threats/open-babel-out-of-bounds-read-in-mol2-file-handler-8b67b5e62026-09-26 https://junglewise.ai/threats/open-babel-out-of-bounds-read-in-mol2-obatom-setformalcharge-d36bf0d32026-06-30 https://junglewise.ai/threats/cve-2026-2243-qemu-out-of-bounds-read-in-vmdk-image-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-26339-hyland-alfresco-transformation-service-argument-injection-rce2026-07-14 https://junglewise.ai/threats/cve-2026-26338-hyland-alfresco-transformation-service-ssrf-in-document2026-07-14 https://junglewise.ai/threats/cve-2026-26337-hyland-alfresco-transformation-service-path-traversal-and-ssrf2026-07-14 https://junglewise.ai/threats/cve-2026-24834-kata-containers-arbitrary-code-execution-in-cloud-hypervisor2026-07-28 https://junglewise.ai/threats/cve-2025-69725-go-chi-chi-open-redirect-in-redirectslashes-middleware2026-07-05 https://junglewise.ai/threats/cve-2026-25940-parallax-jspdf-pdf-injection-in-acroform-module2026-09-25 https://junglewise.ai/threats/cve-2026-27122-svelte-ssr-html-injection-in-svelte-element-tag-validation2026-09-25 https://junglewise.ai/threats/cve-2026-27121-svelte-cross-site-scripting-in-server-side-rendering-via-spread2026-09-25 https://junglewise.ai/threats/cve-2026-27119-svelte-xss-in-ssr-option-element2026-09-25 https://junglewise.ai/threats/cve-2026-27118-svelte-adapter-vercel-cache-poisoning-via-isr-query-parameter2026-09-25 https://junglewise.ai/threats/cline-cli-unauthorized-npm-publish-with-malicious-postinstall-script-50ba85ed2026-09-25 https://junglewise.ai/threats/cve-2026-25755-parallax-jspdf-pdf-object-injection-in-addjs-method2026-09-25 https://junglewise.ai/threats/cve-2026-25535-parallax-jspdf-denial-of-service-in-addimage-method2026-09-25 https://junglewise.ai/threats/cve-2025-9953-database-databank-accreditation-software-sql-injection-via-primary2026-06-05 https://junglewise.ai/threats/cve-2025-8350-inrove-bieticaret-cms-authentication-bypass-via-ear2026-06-05 https://junglewise.ai/threats/cve-2025-9062-mecode-envanty-authorization-bypass-via-user-controlled-key2026-06-05 https://junglewise.ai/threats/cve-2025-13590-wso2-api-manager-arbitrary-file-upload-in-system-rest-api2026-09-24 https://junglewise.ai/threats/cve-2025-12107-wso2-identity-server-server-side-template-injection-in-velocity2026-09-25 https://junglewise.ai/threats/cve-2026-27066-pi-web-solution-live-sales-notification-for-woocommerce-missing2026-06-11 https://junglewise.ai/threats/cve-2026-2704-open-babel-out-of-bounds-read-in-cif-file-handler2026-09-26 https://junglewise.ai/threats/cve-2026-0974-orderable-wordpress-plugin-unauthorized-plugin-installation2026-05-16 https://junglewise.ai/threats/cve-2025-12821-newsblogger-theme-cross-site-request-forgery-in-plugin2026-09-25 https://junglewise.ai/threats/cve-2026-27013-fabric-js-stored-xss-via-unescaped-svg-export2026-09-25 https://junglewise.ai/threats/cve-2026-27009-openclaw-stored-xss-in-control-ui-via-assistant-identity2026-09-25 https://junglewise.ai/threats/cve-2026-27008-openclaw-path-traversal-in-skill-download-target-directory2026-09-25 https://junglewise.ai/threats/cve-2026-27007-openclaw-sandbox-config-hash-array-ordering-integrity-issue2026-09-25 https://junglewise.ai/threats/cve-2026-27004-openclaw-session-tool-information-disclosure-in-shared2026-09-25 https://junglewise.ai/threats/cve-2026-27003-openclaw-telegram-bot-token-exposure-via-logs2026-09-25 https://junglewise.ai/threats/cve-2026-27002-openclaw-docker-container-escape-via-unvalidated-bind-mount2026-09-25 https://junglewise.ai/threats/cve-2026-27001-openclaw-prompt-injection-via-unsanitized-workspace-path2026-09-25 https://junglewise.ai/threats/cve-2026-27022-langchain-redisearch-query-injection-in-langgraph-checkpoint2026-09-25 https://junglewise.ai/threats/cve-2026-26996-isaacs-minimatch-redos-via-repeated-wildcards2026-09-25 https://junglewise.ai/threats/cve-2026-2670-advantech-wise-6610-os-command-injection-in-openvpn-management2026-09-25 https://junglewise.ai/threats/cve-2026-26974-tygo-van-den-hurk-slyde-code-injection-via-automatic-plugin2026-09-25 https://junglewise.ai/threats/cve-2026-22860-rack-directory-traversal-in-rack-directory2026-06-30 https://junglewise.ai/threats/cve-2026-24708-openstack-nova-host-data-destruction-via-unsafe-qemu-img-resize2026-09-26 https://junglewise.ai/threats/cve-2025-70152-code-projects-community-project-scholars-tracking-system-sql2026-09-25 https://junglewise.ai/threats/cve-2025-70151-code-projects-scholars-tracking-system-unrestricted-file-upload2026-09-25 https://junglewise.ai/threats/cve-2025-70150-codeastro-membership-management-system-missing-authentication-and2026-09-25 https://junglewise.ai/threats/cve-2025-70148-codeastro-membership-management-system-insecure-direct-object2026-09-25 https://junglewise.ai/threats/cve-2025-14009-nltk-zip-slip-remote-code-execution-in-downloader-component2026-09-26 https://junglewise.ai/threats/cve-2026-28468-openclaw-authentication-bypass-in-sandbox-browser-bridge-server2026-09-25 https://junglewise.ai/threats/cve-2026-28451-openclaw-ssrf-via-feishu-extension-media-fetching2026-09-25 https://junglewise.ai/threats/cve-2026-29611-openclaw-local-file-inclusion-in-bluebubbles-media-handling2026-09-25 https://junglewise.ai/threats/cve-2026-27486-openclaw-unvalidated-pid-kill-via-sigkill-in-process-cleanup2026-09-25 https://junglewise.ai/threats/cve-2026-28477-openclaw-chutes-oauth-state-validation-bypass-in-manual-login2026-09-25 https://junglewise.ai/threats/cve-2026-27487-openclaw-shell-injection-in-macos-keychain-credential-write2026-09-25 https://junglewise.ai/threats/cve-2026-28462-openclaw-path-traversal-in-trace-download-output-paths2026-09-25 https://junglewise.ai/threats/cve-2026-26972-openclaw-path-traversal-in-browser-download-functionality2026-09-25 https://junglewise.ai/threats/cve-2025-70149-codeastro-membership-management-system-sql-injection-in-print2026-09-25 https://junglewise.ai/threats/cve-2025-70147-projectworlds-online-time-table-generator-missing-authentication2026-09-25 https://junglewise.ai/threats/cve-2025-70146-projectworlds-online-time-table-generator-missing-authentication2026-09-25 https://junglewise.ai/threats/cve-2025-70141-sourcecodester-customer-support-system-broken-access-control-in2026-09-25 https://junglewise.ai/threats/cve-2026-23230-linux-kernel-smb-client-race-condition-in-cached-fid-bitfields2026-06-02 https://junglewise.ai/threats/cve-2026-23229-linux-kernel-race-condition-in-virtio-crypto-driver2026-06-02 https://junglewise.ai/threats/cve-2026-23228-linux-kernel-resource-leak-in-ksmbd-smb-server2026-06-02 https://junglewise.ai/threats/cve-2026-23222-linux-kernel-buffer-overflow-in-omap-crypto-driver2026-06-02 https://junglewise.ai/threats/cve-2026-23220-linux-kernel-ksmbd-infinite-loop-in-smb2-request-handling2026-06-02 https://junglewise.ai/threats/cve-2025-71236-linux-kernel-qla2xxx-null-pointer-dereference-in-scsi-driver2026-07-30 https://junglewise.ai/threats/cve-2025-71234-linux-kernel-rtl8xxxu-wi-fi-driver-out-of-bounds-write2026-07-30 https://junglewise.ai/threats/cve-2025-8308-key-software-solutions-inforex-xss-via-http-headers2026-06-05 https://junglewise.ai/threats/cve-2025-33240-nvidia-megatron-bridge-code-injection-in-data-shuffling-tutorial2026-07-02 https://junglewise.ai/threats/cve-2025-33239-nvidia-megatron-bridge-code-injection-in-data-merging-tutorial2026-07-02 https://junglewise.ai/threats/cve-2025-7630-doruk-wispotter-improper-authentication-and-brute-force2026-06-05 https://junglewise.ai/threats/cve-2026-28456-openclaw-code-execution-via-unsafe-hook-module-path-handling2026-09-25 https://junglewise.ai/threats/cve-2026-28482-openclaw-path-traversal-in-session-transcript-operations2026-09-25 https://junglewise.ai/threats/cve-2026-26960-npm-tar-arbitrary-file-read-write-via-hardlink-symlink-escape2026-09-25 https://junglewise.ai/threats/openclaw-instruction-provenance-confusion-in-inter-session-routing-14c6a14a2026-09-25 https://junglewise.ai/threats/cve-2026-29610-openclaw-command-hijacking-via-unsafe-path-handling2026-09-25 https://junglewise.ai/threats/cve-2026-28476-openclaw-affected-by-ssrf-in-optional-tlon-urbit-extension2026-09-25 https://junglewise.ai/threats/cve-2026-29606-openclaw-twilio-webhook-signature-verification-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-28480-openclaw-telegram-allowlist-authentication-bypass-via-mutable2026-09-25 https://junglewise.ai/threats/cve-2026-28469-openclaw-google-chat-webhook-target-ambiguity-policy-context2026-09-25 https://junglewise.ai/threats/cve-2026-26317-openclaw-csrf-in-loopback-browser-mutation-endpoints2026-09-25 https://junglewise.ai/threats/cve-2026-28478-openclaw-denial-of-service-via-unbounded-webhook-request-body2026-09-25 https://junglewise.ai/threats/cve-2026-28452-openclaw-denial-of-service-through-unguarded-archive-extraction2026-09-25 https://junglewise.ai/threats/cve-2026-29612-openclaw-denial-of-service-through-large-base64-buffer-allocation2026-09-25 https://junglewise.ai/threats/cve-2026-29609-openclaw-denial-of-service-via-unbounded-url-backed-media-fetch2026-09-25 https://junglewise.ai/threats/cve-2026-28392-openclaw-privilege-escalation-in-slack-slash-command-handler2026-09-25 https://junglewise.ai/threats/cve-2026-28463-openclaw-exec-approvals-safebins-shell-expansion-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-26323-openclaw-command-injection-in-clawtributors-updater2026-09-25 https://junglewise.ai/threats/cve-2026-26329-openclaw-path-traversal-in-browser-upload-allows-local-file-read2026-09-25 https://junglewise.ai/threats/cve-2026-26328-openclaw-imessage-group-allowlist-authorization-bypass-via-dm2026-09-25 https://junglewise.ai/threats/cve-2026-26327-openclaw-unauthenticated-discovery-txt-record-injection-in2026-09-25 https://junglewise.ai/threats/cve-2021-22175-gitlab-ssrf-in-internal-network-webhooks2026-05-15 https://junglewise.ai/threats/cve-2026-22769-dell-recoverpoint-for-virtual-machines-hard-coded-credentials2026-05-15 https://junglewise.ai/threats/openclaw-google-chat-authorization-bypass-with-mutable-email-principal-7bec0f482026-09-25 https://junglewise.ai/threats/cve-2026-26326-openclaw-skills-status-information-disclosure2026-09-25 https://junglewise.ai/threats/cve-2026-26325-openclaw-node-host-system-run-allowlist-bypass-via-rawcommand2026-09-25 https://junglewise.ai/threats/cve-2026-26324-openclaw-ssrf-guard-bypass-via-ipv4-mapped-ipv62026-09-25 https://junglewise.ai/threats/cve-2026-26322-openclaw-gateway-tool-unrestricted-url-override2026-09-25 https://junglewise.ai/threats/cve-2026-26321-openclaw-local-file-disclosure-in-feishu-extension2026-09-25 https://junglewise.ai/threats/cve-2026-26320-openclaw-macos-deep-link-confirmation-truncation-disclosure2026-09-25 https://junglewise.ai/threats/cve-2026-26319-openclaw-voice-call-missing-webhook-authentication-in-telnyx2026-09-25 https://junglewise.ai/threats/cve-2026-28447-openclaw-path-traversal-in-plugin-installation2026-09-25 https://junglewise.ai/threats/cve-2026-28473-openclaw-authorization-bypass-in-exec-approval-command2026-09-25 https://junglewise.ai/threats/cve-2026-28481-openclaw-ms-teams-attachment-downloader-bearer-token-leakage2026-09-25 https://junglewise.ai/threats/cve-2026-28448-openclaw-improper-authorization-in-twitch-plugin-access-control2026-09-25 https://junglewise.ai/threats/cve-2026-28446-openclaw-voice-call-extension-allowlist-bypass-via-empty-caller2026-09-25 https://junglewise.ai/threats/cve-2026-28454-openclaw-telegram-webhook-authentication-bypass-in-access-control2026-09-25 https://junglewise.ai/threats/cve-2026-28471-openclaw-matrix-allowlist-bypass-in-displayname-and-localpart2026-09-25 https://junglewise.ai/threats/cve-2026-26316-openclaw-bluebubbles-webhook-auth-bypass-via-loopback-proxy-trust2026-09-25 https://junglewise.ai/threats/openclaw-log-poisoning-via-websocket-headers-48635cea2026-09-25 https://junglewise.ai/threats/cve-2026-28450-openclaw-nostr-plugin-unauthenticated-profile-tampering2026-09-25 https://junglewise.ai/threats/cve-2025-66614-apache-tomcat-client-certificate-verification-bypass-via-sni2026-06-12 https://junglewise.ai/threats/cve-2026-24733-apache-tomcat-security-constraint-bypass-in-http-0-9-handling2026-06-29 https://junglewise.ai/threats/cve-2026-28467-openclaw-ssrf-via-attachment-media-url-hydration2026-09-25 https://junglewise.ai/threats/cve-2026-26731-totolink-a3002ru-stack-buffer-overflow-in-formdnsv62026-09-25 https://junglewise.ai/threats/cve-2026-24734-apache-tomcat-certificate-revocation-bypass-in-ocsp-validation2026-06-30 https://junglewise.ai/threats/cve-2026-25474-openclaw-telegram-webhook-auth-bypass-via-missing-secret2026-09-25 https://junglewise.ai/threats/cve-2026-24764-openclaw-prompt-injection-via-slack-channel-metadata2026-09-25 https://junglewise.ai/threats/cve-2026-29613-openclaw-webhook-auth-bypass-in-bluebubbles-handler2026-09-25 https://junglewise.ai/threats/openclaw-image-tool-server-side-request-forgery-cf78df7c2026-09-25 https://junglewise.ai/threats/cve-2026-28470-openclaw-os-command-injection-via-exec-allowlist-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-28458-openclaw-browser-relay-authentication-bypass-in-cdp-websocket2026-09-25 https://junglewise.ai/threats/cve-2026-28391-openclaw-windows-cmd-exe-parsing-bypass-in-allowlist-enforcement2026-09-25 https://junglewise.ai/threats/cve-2026-28459-openclaw-arbitrary-transcript-path-file-write-via-gateway2026-09-25 https://junglewise.ai/threats/openclaw-hook-session-key-override-enables-cross-session-routing-0fda0efb2026-09-25 https://junglewise.ai/threats/cve-2026-24126-weblate-argument-injection-in-ssh-management-console2026-09-26 https://junglewise.ai/threats/cve-2026-28472-openclaw-gateway-authentication-bypass-via-incomplete-token2026-09-25 https://junglewise.ai/threats/cve-2025-70397-jizhicms-sql-injection-in-article-and-extmolds-deleteall2026-07-05 https://junglewise.ai/threats/cve-2025-65753-gryphon-guardian-improper-certificate-validation-in-speedtest2026-07-05 https://junglewise.ai/threats/cve-2025-69287-bsv-blockchain-sdk-incorrect-brc-104-signature-data-preparation2026-09-25 https://junglewise.ai/threats/cve-2026-25087-apache-arrow-c-use-after-free-in-ipc-file-reader2026-06-05 https://junglewise.ai/threats/cve-2026-22208-s-100expertteam-opens100-remote-code-execution-in-portrayal2026-05-26 https://junglewise.ai/threats/cve-2025-7706-tubitak-bilgem-liderahenk-missing-authentication-in-critical2026-06-05 https://junglewise.ai/threats/cve-2025-8303-eka-software-real-estate-script-v5-cross-site-scripting2026-06-05 https://junglewise.ai/threats/cve-2025-7631-tumeva-prime-news-software-sql-injection2026-06-05 https://junglewise.ai/threats/cve-2026-26220-modeltc-lightllm-remote-code-execution-in-pd-websocket-endpoints2026-07-14 https://junglewise.ai/threats/cve-2008-0015-microsoft-windows-video-activex-control-stack-buffer-overflow-in2026-05-15 https://junglewise.ai/threats/cve-2020-7796-synacor-zimbra-collaboration-suite-ssrf-in-webex-zimlet2026-05-15 https://junglewise.ai/threats/cve-2024-7694-teamt5-threatsonar-anti-ransomware-unrestricted-file-upload2026-05-15 https://junglewise.ai/threats/cve-2026-2441-google-chromium-use-after-free-in-css2026-05-15 https://junglewise.ai/threats/cve-2026-2447-webm-project-libvpx-heap-buffer-overflow-in-vp8-vp9-codec2026-06-30 https://junglewise.ai/threats/cve-2026-2531-mindsdb-ssrf-via-url-validation-bypass-in-file-upload2026-09-26 https://junglewise.ai/threats/cve-2026-26369-enet-smart-home-server-privilege-escalation-in-setusergroup2026-09-25 https://junglewise.ai/threats/cve-2026-23204-linux-kernel-out-of-bounds-read-in-net-sched-cls-u322026-06-01 https://junglewise.ai/threats/cve-2026-23201-linux-kernel-cephfs-invalid-pointer-memory-free-in-parse-longname2026-09-25 https://junglewise.ai/threats/cve-2026-23191-linux-kernel-alsa-aloop-race-condition-in-pcm-trigger2026-09-25 https://junglewise.ai/threats/cve-2026-23185-linux-kernel-iwlwifi-use-after-free-in-mlo-scan-handling2026-06-30 https://junglewise.ai/threats/cve-2025-71221-linux-kernel-use-after-free-in-mmp-pdma-residue2026-06-01 https://junglewise.ai/threats/cve-2025-71204-linux-kernel-ksmbd-reference-count-leak-in-smb2-durable-handles2026-07-30 https://junglewise.ai/threats/cve-2026-23171-linux-kernel-use-after-free-in-bonding-driver-during-enslave2026-05-17 https://junglewise.ai/threats/cve-2026-23157-linux-kernel-btrfs-deadlock-in-metadata-writepages2026-06-01 https://junglewise.ai/threats/cve-2026-23154-linux-kernel-protocol-inconsistency-in-fraglist-gro-forwarding2026-07-14 https://junglewise.ai/threats/cve-2026-23151-linux-kernel-bluetooth-mgmt-memory-leak-in-set-ssp-complete2026-05-17 https://junglewise.ai/threats/cve-2026-23141-linux-kernel-btrfs-invalid-memory-access-in-send-operation2026-06-01 https://junglewise.ai/threats/cve-2026-23137-linux-kernel-memory-leak-in-device-tree-unit-test2026-09-25 https://junglewise.ai/threats/cve-2025-71202-linux-kernel-stale-iotlb-entries-in-iommu-sva-for-x862026-07-30 https://junglewise.ai/threats/cve-2025-71201-linux-kernel-netfs-out-of-bounds-read-in-read-collect-c2026-07-30 https://junglewise.ai/threats/cve-2026-23113-linux-kernel-io-uring-hung-task-in-io-wq-exit-path2026-07-14 https://junglewise.ai/threats/cloudflare-agents-reflected-xss-in-ai-playground-oauth-callback-1acc75d42026-09-25 https://junglewise.ai/threats/cve-2026-76227-renovate-improper-access-control-in-child-process-environment2026-09-25 https://junglewise.ai/threats/cve-2026-26226-lukilabs-beautiful-mermaid-xss-via-svg-attribute-injection2026-09-25 https://junglewise.ai/threats/sqlparse-denial-of-service-in-tuple-formatting-e8c495852026-09-26 https://junglewise.ai/threats/cve-2026-23112-linux-kernel-out-of-bounds-write-in-nvmet-tcp2026-06-02 https://junglewise.ai/threats/cve-2026-23111-linux-kernel-use-after-free-in-nf-tables-catchall-activation2026-06-02 https://junglewise.ai/threats/cve-2026-1619-universal-software-inc-flexcity-kiosk-authorization-bypass2026-06-06 https://junglewise.ai/threats/cve-2026-1618-universal-software-inc-flexcity-kiosk-authentication-bypass2026-06-06 https://junglewise.ai/threats/cve-2025-14349-universal-software-inc-flexcity-kiosk-privilege-escalation2026-06-04 https://junglewise.ai/threats/cve-2025-33042-apache-avro-java-sdk-code-injection-in-avro-compiler2026-06-05 https://junglewise.ai/threats/cve-2026-0872-thales-safenet-agent-for-windows-logon-certificate-validation2026-09-25 https://junglewise.ai/threats/cve-2026-1721-cloudflare-agents-reflected-xss-in-oauth-callback-handler2026-09-25 https://junglewise.ai/threats/cve-2026-1731-beyondtrust-remote-support-and-pra-os-command-injection2026-05-15 https://junglewise.ai/threats/cve-2026-26185-directus-user-enumeration-via-password-reset-timing-attack2026-09-25 https://junglewise.ai/threats/cve-2026-25949-traefik-proxy-denial-of-service-via-starttls-timeout-bypass2026-07-09 https://junglewise.ai/threats/cve-2026-26219-newbee-ltd-newbee-mall-weak-password-hashing-using-unsalted-md52026-07-14 https://junglewise.ai/threats/cve-2026-26218-newbee-ltd-newbee-mall-default-credentials-in-database-schema2026-07-14 https://junglewise.ai/threats/cve-2025-56647-farme-farmfe-core-missing-origin-validation-in-websocket2026-09-25 https://junglewise.ai/threats/cve-2026-26063-cedipay-input-validation-bypass-in-payment-processing2026-09-25 https://junglewise.ai/threats/cve-2026-2391-npm-qs-arraylimit-bypass-in-comma-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-26217-unclecode-crawl4ai-local-file-inclusion-in-docker-api2026-07-14 https://junglewise.ai/threats/cve-2026-26216-unclecode-crawl4ai-remote-code-execution-in-docker-api-hooks2026-09-26 https://junglewise.ai/threats/cve-2026-26214-xiaomi-galaxy-fds-android-sdk-tls-hostname-verification-bypass2026-07-14 https://junglewise.ai/threats/cve-2025-69752-ideagen-q-pulse-idor-in-my-details-profile-page2026-07-05 https://junglewise.ai/threats/cve-2025-14014-ntn-smart-panel-unrestricted-file-upload-and-acl-bypass2026-06-04 https://junglewise.ai/threats/cve-2026-2007-postgresql-pg-trgm-heap-buffer-overflow2026-06-30 https://junglewise.ai/threats/cve-2026-2006-postgresql-buffer-overflow-in-multibyte-character-manipulation2026-06-30 https://junglewise.ai/threats/cve-2026-2005-postgresql-pgcrypto-heap-buffer-overflow-in-contrib-module2026-06-30 https://junglewise.ai/threats/cve-2026-2004-postgresql-intarray-remote-code-execution-in-selectivity-estimator2026-06-30 https://junglewise.ai/threats/cve-2025-13004-farktor-software-e-commerce-package-auth-bypass-in-user2026-06-04 https://junglewise.ai/threats/cve-2025-13002-farktor-software-e-commerce-package-xss2026-06-04 https://junglewise.ai/threats/cve-2025-10969-farktor-software-e-commerce-package-sql-injection2026-06-05 https://junglewise.ai/threats/cve-2025-41117-grafana-xss-in-explore-traces-view-via-jaeger-http-api2026-05-11 https://junglewise.ai/threats/cve-2026-2327-markdown-it-redos-in-linkify-function2026-09-25 https://junglewise.ai/threats/cve-2026-0969-next-mdx-remote-arbitrary-code-execution-in-mdx-serialization2026-09-25 https://junglewise.ai/threats/cve-2024-43468-microsoft-configuration-manager-sql-injection2026-05-15 https://junglewise.ai/threats/cve-2025-15556-notepad-code-execution-via-wingup-updater-integrity-failure2026-05-15 https://junglewise.ai/threats/cve-2025-40536-solarwinds-web-help-desk-security-control-bypass2026-05-15 https://junglewise.ai/threats/cve-2026-20700-apple-multiple-operating-systems-buffer-overflow2026-05-15 https://junglewise.ai/threats/cve-2026-26215-zyddnys-manga-image-translator-unsafe-deserialization-in-shared2026-07-14 https://junglewise.ai/threats/cve-2026-20677-apple-ios-and-ipados-sandbox-bypass-via-race-condition-in2026-09-25 https://junglewise.ai/threats/cve-2026-20652-apple-and-red-hat-multiple-products-buffer-overflow-denial-of2026-06-30 https://junglewise.ai/threats/cve-2026-20644-apple-and-red-hat-memory-handling-vulnerability-in-web-content2026-06-30 https://junglewise.ai/threats/cve-2026-20636-apple-and-red-hat-memory-handling-vulnerability-in-web-content2026-06-30 https://junglewise.ai/threats/cve-2026-20635-apple-safari-and-multiple-operating-systems-memory-corruption2026-06-30 https://junglewise.ai/threats/cve-2026-20630-apple-macos-permissions-issue-in-launchservices2026-09-25 https://junglewise.ai/threats/cve-2026-20627-apple-coreservices-environment-variable-handling-privilege2026-09-25 https://junglewise.ai/threats/cve-2026-20623-apple-macos-foundation-permissions-issue-in-user-data-access2026-09-25 https://junglewise.ai/threats/cve-2026-20617-apple-ios-race-condition-in-coreservices-privilege-escalation2026-09-25 https://junglewise.ai/threats/cve-2026-20615-apple-coreservices-path-handling-privilege-escalation2026-09-25 https://junglewise.ai/threats/cve-2026-20608-apple-safari-and-os-improper-state-management-in-web-content2026-06-30 https://junglewise.ai/threats/cve-2026-1669-google-keras-arbitrary-file-read-in-hdf5-model-loading2026-09-26 https://junglewise.ai/threats/cve-2025-46310-apple-macos-packagekit-improper-state-management2026-05-26 https://junglewise.ai/threats/cve-2025-43417-apple-macos-file-bookmark-path-handling-issue2026-09-25 https://junglewise.ai/threats/cve-2025-43403-apple-macos-improper-authorization-in-compression-component2026-05-26 https://junglewise.ai/threats/cve-2026-26158-busybox-arbitrary-file-modification-via-unvalidated-tar-link2026-06-02 https://junglewise.ai/threats/cve-2026-26157-busybox-path-traversal-in-archive-extraction-utilities2026-06-02 https://junglewise.ai/threats/cve-2026-25990-python-pillow-pillow-out-of-bounds-write-in-psd-image-loading2026-09-26 https://junglewise.ai/threats/cve-2020-37212-nsasoft-spotmsn-buffer-overflow-in-registration-name-field2026-06-29 https://junglewise.ai/threats/cve-2020-37211-nsasoft-spotim-buffer-overflow-in-registration-name-field2026-06-29 https://junglewise.ai/threats/cve-2020-37210-nsasoft-spotie-buffer-overflow-in-registration-key-input2026-06-29 https://junglewise.ai/threats/cve-2020-37209-nsasoft-spotftp-buffer-overflow-in-registration-name-field2026-06-29 https://junglewise.ai/threats/cve-2020-37208-nsasoft-spotftp-buffer-overflow-in-registration-key-field2026-06-29 https://junglewise.ai/threats/cve-2020-37207-nsasoft-spotdialup-buffer-overflow-in-registration-key-field2026-06-29 https://junglewise.ai/threats/cve-2020-37206-nsasoft-sharealarmpro-buffer-overflow-in-registration-key-field2026-06-29 https://junglewise.ai/threats/cve-2020-37205-nsasoft-remshutdown-buffer-overflow-in-name-registration-field2026-06-29 https://junglewise.ai/threats/cve-2020-37204-nsauditor-remshutdown-buffer-overflow-in-registration-key-input2026-06-29 https://junglewise.ai/threats/cve-2020-37201-nsasoft-netsharewatcher-buffer-overflow-in-registration-name2026-06-29 https://junglewise.ai/threats/cve-2020-37200-nsasoft-netsharewatcher-stack-buffer-overflow-in-registration-key2026-06-29 https://junglewise.ai/threats/cve-2020-37199-nsasoft-nbmonitor-buffer-overflow-in-registration-key-input2026-06-29 https://junglewise.ai/threats/cve-2020-37197-nsasoft-dnss-domain-name-search-software-buffer-overflow-in-name2026-06-29 https://junglewise.ai/threats/cve-2020-37196-nsasoft-dnss-domain-name-search-software-buffer-overflow-in2026-06-29 https://junglewise.ai/threats/cve-2026-26190-milvus-authentication-bypass-in-rest-api-and-debug-endpoints2026-07-06 https://junglewise.ai/threats/cve-2025-69873-ajv-redos-in-pattern-keyword-with-data-option-enabled2026-09-25 https://junglewise.ai/threats/cve-2025-69872-diskcache-insecure-pickle-deserialization-code-execution2026-06-30 https://junglewise.ai/threats/cve-2025-69874-nanotar-path-traversal-in-parsetar-and-parsetargzip2026-09-25 https://junglewise.ai/threats/cve-2025-65480-pacom-unison-client-remote-code-execution-in-report-templates2026-07-05 https://junglewise.ai/threats/cve-2026-25869-minigal-nano-path-traversal-in-index-php-via-dir-parameter2026-07-14 https://junglewise.ai/threats/cve-2026-25868-minigal-nano-reflected-xss-in-index-php-via-dir-parameter2026-07-14 https://junglewise.ai/threats/cve-2026-1837-google-libjxl-out-of-bounds-write-in-grayscale-color2026-06-30 https://junglewise.ai/threats/cve-2025-12059-logo-software-j-platform-sensitive-information-disclosure-via2026-06-04 https://junglewise.ai/threats/cve-2026-26021-ahdinosaur-set-in-prototype-pollution-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-26019-langchain-langchain-community-ssrf-bypass-in-recursiveurlloader2026-09-25 https://junglewise.ai/threats/cve-2026-26013-langchain-chatopenai-server-side-request-forgery-via-image-token2026-09-26 https://junglewise.ai/threats/cve-2025-8668-e-kalite-turboard-reflected-xss2026-06-05 https://junglewise.ai/threats/cve-2025-8025-dinosoft-business-solutions-dinosoft-erp-auth-bypass-in-critical2026-06-05 https://junglewise.ai/threats/cve-2025-66274-qnap-qts-and-quts-hero-null-pointer-dereference2026-06-09 https://junglewise.ai/threats/cve-2025-10174-pan-software-pancafe-pro-cleartext-transmission-of-sensitive2026-06-05 https://junglewise.ai/threats/cve-2025-9986-vadi-corporate-information-systems-digikent-sensitive-information2026-06-05 https://junglewise.ai/threats/cve-2025-10913-saastech-temizlikyolda-cross-site-scripting2026-06-05 https://junglewise.ai/threats/cve-2025-10912-saastech-temizlikyolda-authorization-bypass-via-user-controlled2026-06-05 https://junglewise.ai/threats/cve-2026-25870-doracms-ssrf-in-ueditor-remote-image-fetch-functionality2026-07-14 https://junglewise.ai/threats/cve-2026-26007-pyca-cryptography-missing-subgroup-validation-in-sect-curves2026-06-30 https://junglewise.ai/threats/cve-2026-2303-mongodb-mongo-go-driver-heap-out-of-bounds-read-in-gssapi-error2026-06-18 https://junglewise.ai/threats/cve-2026-21349-adobe-lightroom-desktop-out-of-bounds-write2026-09-25 https://junglewise.ai/threats/cve-2026-21348-adobe-substance3d-modeler-out-of-bounds-read2026-09-25 https://junglewise.ai/threats/cve-2026-25506-munge-buffer-overflow-in-munged-message-unpacking2026-06-30 https://junglewise.ai/threats/cve-2026-21355-adobe-dng-sdk-out-of-bounds-read-in-image-processing2026-09-25 https://junglewise.ai/threats/cve-2026-21354-adobe-dng-sdk-integer-overflow-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21353-adobe-dng-sdk-integer-overflow-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21352-adobe-dng-sdk-out-of-bounds-write2026-09-25 https://junglewise.ai/threats/cve-2026-21347-adobe-bridge-integer-overflow2026-09-25 https://junglewise.ai/threats/cve-2026-21346-adobe-bridge-out-of-bounds-write-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21345-adobe-substance3d-stager-out-of-bounds-read-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21344-adobe-substance3d-stager-out-of-bounds-read-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21343-adobe-substance3d-stager-out-of-bounds-read-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21342-adobe-substance3d-stager-out-of-bounds-write-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-21341-adobe-substance3d-stager-out-of-bounds-write2026-09-25 https://junglewise.ai/threats/cve-2026-1774-casl-ability-prototype-pollution-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-25646-libpng-heap-buffer-overflow-in-png-set-quantize2026-06-30 https://junglewise.ai/threats/cve-2026-21527-microsoft-exchange-server-ui-misrepresentation-spoofing2026-06-15 https://junglewise.ai/threats/cve-2026-21358-adobe-indesign-desktop-heap-buffer-overflow2026-09-25 https://junglewise.ai/threats/cve-2026-21357-adobe-indesign-desktop-heap-based-buffer-overflow2026-09-25 https://junglewise.ai/threats/cve-2026-21351-adobe-after-effects-use-after-free-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-21350-adobe-after-effects-null-pointer-dereference2026-09-25 https://junglewise.ai/threats/cve-2026-21340-adobe-substance3d-designer-out-of-bounds-read-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21339-adobe-substance3d-designer-out-of-bounds-read-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21338-adobe-substance3d-designer-null-pointer-dereference2026-09-25 https://junglewise.ai/threats/cve-2026-21337-adobe-substance3d-designer-out-of-bounds-read-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21336-adobe-substance3d-designer-null-pointer-dereference2026-09-25 https://junglewise.ai/threats/cve-2026-21335-adobe-substance3d-designer-out-of-bounds-write2026-09-25 https://junglewise.ai/threats/cve-2026-21334-adobe-substance3d-designer-out-of-bounds-write2026-09-25 https://junglewise.ai/threats/cve-2026-21332-adobe-indesign-out-of-bounds-read-in-memory2026-09-25 https://junglewise.ai/threats/cve-2026-21330-adobe-after-effects-type-confusion-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-21329-adobe-after-effects-use-after-free-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-21328-adobe-after-effects-out-of-bounds-write2026-09-25 https://junglewise.ai/threats/cve-2026-21327-adobe-after-effects-out-of-bounds-write-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-21326-adobe-after-effects-use-after-free-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-21325-adobe-after-effects-out-of-bounds-read-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21324-adobe-after-effects-out-of-bounds-read-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21323-adobe-after-effects-use-after-free-vulnerability2026-09-25 https://junglewise.ai/threats/cve-2026-21322-adobe-after-effects-out-of-bounds-read-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21321-adobe-after-effects-integer-overflow-in-file-handling2026-09-25 https://junglewise.ai/threats/cve-2026-21319-adobe-after-effects-out-of-bounds-read-in-memory-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21318-adobe-after-effects-out-of-bounds-write-in-file-handling2026-09-25 https://junglewise.ai/threats/cve-2026-21317-adobe-audition-out-of-bounds-read-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21316-adobe-audition-buffer-overflow-in-memory-access2026-09-25 https://junglewise.ai/threats/cve-2026-21315-adobe-audition-out-of-bounds-read-in-memory-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21314-adobe-audition-out-of-bounds-read-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21313-adobe-audition-out-of-bounds-read-in-memory-access2026-09-25 https://junglewise.ai/threats/cve-2026-21312-adobe-audition-out-of-bounds-write-in-file-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-21229-microsoft-power-bi-improper-input-validation-allows-code2026-09-25 https://junglewise.ai/threats/cve-2026-0651-tp-link-tapo-camera-path-traversal-in-http-server2026-09-25 https://junglewise.ai/threats/cve-2025-35998-intel-quickassist-technology-privilege-escalation-in-xeon-62026-06-30 https://junglewise.ai/threats/cve-2025-68686-fortinet-fortios-information-disclosure-in-ssl-vpn2026-07-27 https://junglewise.ai/threats/cve-2025-64157-fortinet-fortios-format-string-vulnerability-in-capwap-fast2026-05-12 https://junglewise.ai/threats/cve-2025-62439-fortinet-fortios-firewall-policy-bypass-in-fsso-terminal-services2026-05-12 https://junglewise.ai/threats/cve-2025-55018-fortinet-fortios-http-request-smuggling-in-firewall-policies2026-05-12 https://junglewise.ai/threats/cve-2025-7636-ergosis-zeus-pdks-sql-injection2026-06-05 https://junglewise.ai/threats/cve-2025-7347-dinibh-patrol-tracking-system-authorization-bypass-via-user2026-06-05 https://junglewise.ai/threats/cve-2025-6967-sarman-soft-cms-authentication-bypass-via-execution-after-redirect2026-06-05 https://junglewise.ai/threats/cve-2025-11242-teknolist-okulistik-ssrf-vulnerability2026-06-04 https://junglewise.ai/threats/cve-2026-23687-sap-netweaver-as-abap-xml-signature-wrapping-in-saml-service2026-06-09 https://junglewise.ai/threats/cve-2026-25957-cube-core-denial-of-service-via-crafted-request2026-09-25 https://junglewise.ai/threats/cve-2026-25958-cube-core-privilege-escalation-via-specially-crafted-request2026-09-25 https://junglewise.ai/threats/cve-2026-25951-fuxa-path-traversal-sanitization-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-25939-fuxa-authorization-bypass-in-scheduler-endpoint2026-09-25 https://junglewise.ai/threats/cve-2026-25938-fuxa-authentication-bypass-in-node-red-integration2026-09-25 https://junglewise.ai/threats/cve-2026-25918-rageagainstthepixel-unity-cli-plaintext-credential-exposure-in2026-09-25 https://junglewise.ai/threats/cve-2026-25881-nyariv-sandboxjs-sandbox-escape-via-prototype-pollution2026-09-25 https://junglewise.ai/threats/cve-2026-21510-microsoft-windows-shell-protection-mechanism-failure2026-05-15 https://junglewise.ai/threats/cve-2026-21513-microsoft-mshtml-framework-protection-mechanism-failure2026-05-15 https://junglewise.ai/threats/cve-2026-21514-microsoft-office-word-reliance-on-untrusted-inputs-in-security2026-05-15 https://junglewise.ai/threats/cve-2026-21519-microsoft-windows-type-confusion-in-desktop-window-manager2026-05-15 https://junglewise.ai/threats/cve-2026-21525-microsoft-windows-null-pointer-dereference-in-remote-access2026-05-15 https://junglewise.ai/threats/cve-2026-21533-microsoft-windows-privilege-escalation-in-remote-desktop-services2026-05-15 https://junglewise.ai/threats/cve-2026-25639-axios-denial-of-service-in-mergeconfig2026-09-25 https://junglewise.ai/threats/cve-2026-25528-langchain-langsmith-sdk-server-side-request-forgery-via-tracing2026-09-25 https://junglewise.ai/threats/cve-2026-1529-keycloak-improper-signature-verification-in-organization2026-06-30 https://junglewise.ai/threats/cve-2026-1486-keycloak-improper-security-check-for-disabled-identity-providers2026-06-30 https://junglewise.ai/threats/cve-2026-24678-freerdp-use-after-free-in-ecam-channel-write2026-06-30 https://junglewise.ai/threats/cve-2026-25478-litestar-cors-origin-allowlist-bypass-via-unescaped-regex2026-09-26 https://junglewise.ai/threats/cve-2025-14831-gnutls-denial-of-service-via-excessive-resource-consumption2026-06-10 https://junglewise.ai/threats/cve-2025-10465-birtech-sensaway-unrestricted-file-upload-leading-to-web-shell2026-06-05 https://junglewise.ai/threats/cve-2025-10464-birtech-senseway-insecure-storage-of-sensitive-information2026-06-05 https://junglewise.ai/threats/cve-2026-22922-apache-airflow-authorization-bypass-in-task-logs2026-09-26 https://junglewise.ai/threats/cve-2025-7708-atlas-educational-software-k12net-sensitive-information-disclosure2026-06-05 https://junglewise.ai/threats/cve-2025-6830-xpoda-password-module-sql-injection2026-06-05 https://junglewise.ai/threats/cve-2025-10463-birtech-senseway-improper-authentication2026-06-05 https://junglewise.ai/threats/cve-2026-23903-apache-shiro-authentication-bypass-via-case-sensitive-filename2026-09-25 https://junglewise.ai/threats/cve-2025-7799-zirve-information-technologies-e-taxpayer-accounting-website2026-06-05 https://junglewise.ai/threats/cve-2026-1615-dchester-jsonpath-code-injection-via-unsafe-evaluation2026-09-25 https://junglewise.ai/threats/cve-2026-2178-xcode-mcp-server-command-injection-in-lldb-runner2026-09-25 https://junglewise.ai/threats/cve-2026-2141-wukongopensource-wukongcrm-improper-authorization-in-url-handler2026-07-14 https://junglewise.ai/threats/cve-2026-2130-burtthecoder-mcp-maigret-command-injection-in-search-username2026-09-25 https://junglewise.ai/threats/cve-2026-25859-wekan-incorrect-authorization-in-migration-functionality2026-07-14 https://junglewise.ai/threats/cve-2026-25858-macrozheng-mall-authentication-bypass-in-password-reset-workflow2026-07-14 https://junglewise.ai/threats/cve-2026-25568-wekan-authorization-bypass-in-allowprivateonly-setting2026-07-14 https://junglewise.ai/threats/cve-2026-25567-wekan-idor-in-card-comment-creation-api2026-07-14 https://junglewise.ai/threats/cve-2026-25566-wekan-incorrect-authorization-in-cross-board-card-move-logic2026-07-14 https://junglewise.ai/threats/cve-2026-25565-wekan-incorrect-authorization-in-card-update-api2026-07-14 https://junglewise.ai/threats/cve-2026-25564-wekan-idor-in-checklist-creation-and-deletion-routes2026-07-14 https://junglewise.ai/threats/cve-2026-25563-wekan-idor-in-checklist-creation2026-07-14 https://junglewise.ai/threats/cve-2026-25562-wekan-information-disclosure-in-attachments-publication2026-07-14 https://junglewise.ai/threats/cve-2026-25561-wekan-authorization-weakness-in-attachment-upload-api2026-07-14 https://junglewise.ai/threats/cve-2026-25560-wekan-ldap-filter-injection-in-ldap-authentication2026-07-14 https://junglewise.ai/threats/cve-2025-15267-bold-page-builder-stored-cross-site-scripting-in-accordion2026-09-25 https://junglewise.ai/threats/cve-2026-25749-vim-heap-buffer-overflow-in-helpfile-option-handling2026-06-09 https://junglewise.ai/threats/keylime-registrar-authentication-bypass-via-missing-tls-validation-f26498d52026-09-26 https://junglewise.ai/threats/cve-2026-25580-pydantic-pydantic-ai-ssrf-in-url-download-functionality2026-09-26 https://junglewise.ai/threats/cve-2026-25640-pydantic-ai-path-traversal-and-xss-in-web-ui2026-06-30 https://junglewise.ai/threats/cve-2026-1709-keylime-authentication-bypass-in-registrar-component2026-09-26 https://junglewise.ai/threats/cve-2026-25762-adonisjs-bodyparser-denial-of-service-via-unbounded-memory2026-09-25 https://junglewise.ai/threats/cve-2026-25754-adonisjs-bodyparser-prototype-pollution-in-multipart-parsing2026-09-25 https://junglewise.ai/threats/cve-2026-25725-anthropic-claude-code-sandbox-escape-via-configuration-injection2026-09-25 https://junglewise.ai/threats/cve-2026-25724-claude-code-permission-bypass-through-symbolic-links2026-09-25 https://junglewise.ai/threats/cve-2026-25723-anthropic-claude-code-command-injection-via-piped-sed2026-09-25 https://junglewise.ai/threats/cve-2026-25722-anthropic-claude-code-command-injection-via-directory-traversal2026-09-25 https://junglewise.ai/threats/cve-2026-25651-client-certificate-auth-open-redirect-via-host-header-injection2026-09-25 https://junglewise.ai/threats/cve-2026-25592-microsoft-semantic-kernel-arbitrary-file-write-in2026-09-26 https://junglewise.ai/threats/cve-2026-25581-samclarke-sceditor-dom-xss-in-configuration-options2026-09-24 https://junglewise.ai/threats/cve-2026-25556-artifex-mupdf-double-free-in-fz-fill-pixmap-from-display-list2026-07-14 https://junglewise.ai/threats/cve-2019-25293-bluestacks-app-player-unquoted-service-path-in-bsthdlogrotatorsvc2026-06-17 https://junglewise.ai/threats/cve-2026-1337-neo4j-enterprise-and-community-log-injection-via-unescaped2026-09-25 https://junglewise.ai/threats/cve-2025-13818-eset-management-agent-privilege-escalation-via-insecure-temporary2026-09-25 https://junglewise.ai/threats/cve-2026-2015-portabilis-i-educar-broken-authorization-in-final-status-import2026-09-25 https://junglewise.ai/threats/cve-2026-25641-nyariv-sandboxjs-sandbox-escape-via-toctou-in-property-access2026-09-25 https://junglewise.ai/threats/cve-2026-25732-nicegui-path-traversal-in-fileupload-save2026-09-26 https://junglewise.ai/threats/cve-2026-25587-nyariv-sandboxjs-sandbox-escape-via-map-prototype2026-09-25 https://junglewise.ai/threats/cve-2026-25586-nyariv-sandboxjs-sandbox-escape-via-prototype-whitelist-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-25574-payload-cms-cross-collection-idor-in-preferences2026-09-25 https://junglewise.ai/threats/cve-2026-25544-payload-cms-drizzle-sql-injection-in-json-richtext-queries2026-09-25 https://junglewise.ai/threats/cve-2026-25520-nyariv-sandboxjs-sandbox-escape-to-rce2026-09-25 https://junglewise.ai/threats/cve-2025-12131-silicon-labs-802-15-4-stack-denial-of-service-via-truncated2026-09-25 https://junglewise.ai/threats/cve-2025-68458-webpack-buildhttp-alloweduris-bypass-via-url-userinfo2026-09-25 https://junglewise.ai/threats/cve-2025-68157-webpack-ssrf-in-httpuriplugin-via-redirect-allow-list-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-1707-pgadmin-4-restore-restriction-bypass-via-key-disclosure2026-09-26 https://junglewise.ai/threats/cve-2026-25533-agentfront-enclave-vm-sandbox-escape-via-infinite-recursion2026-09-25 https://junglewise.ai/threats/cve-2025-69619-my-text-editor-path-traversal-in-file-import-process2026-07-05 https://junglewise.ai/threats/cve-2020-37131-nsauditor-product-key-explorer-buffer-overflow-in-registration2026-06-29 https://junglewise.ai/threats/cve-2020-37121-code-blocks-buffer-overflow-in-text-file-handling2026-09-25 https://junglewise.ai/threats/cve-2025-61732-google-go-code-smuggling-in-cgo-via-comment-parsing-discrepancy2026-06-30 https://junglewise.ai/threats/cve-2026-25752-fuxa-unauthenticated-remote-arbitrary-device-tag-write2026-09-25 https://junglewise.ai/threats/cve-2026-25895-fuxa-path-traversal-arbitrary-file-write-in-upload-api2026-09-25 https://junglewise.ai/threats/cve-2026-25894-frangoteam-fuxa-remote-code-execution-via-hardcoded-jwt-secret2026-09-25 https://junglewise.ai/threats/cve-2026-25751-fuxa-unauthenticated-exposure-of-plaintext-database-credentials2026-09-25 https://junglewise.ai/threats/cve-2026-25893-fuxa-authentication-bypass-and-remote-code-execution-via2026-09-25 https://junglewise.ai/threats/cve-2026-25536-model-context-protocol-typescript-sdk-data-leak-in-mcpserver2026-09-25 https://junglewise.ai/threats/cve-2026-25521-locutus-prototype-pollution-in-parse-str-function2026-09-25 https://junglewise.ai/threats/cve-2026-25631-n8n-domain-allowlist-bypass-in-http-request-node2026-09-25 https://junglewise.ai/threats/cve-2026-25630-surveyjs-survey-pdf-local-file-inclusion-via-jspdf2026-09-25 https://junglewise.ai/threats/cve-2026-25593-openclaw-unauthenticated-command-injection-via-websocket-config2026-09-25 https://junglewise.ai/threats/cve-2026-25546-coding-solo-godot-mcp-command-injection-in-projectpath2026-09-25 https://junglewise.ai/threats/cve-2026-25115-n8n-python-sandbox-escape-in-code-node2026-09-25 https://junglewise.ai/threats/cve-2026-25056-n8n-merge-node-arbitrary-file-write-leading-to-rce2026-09-25 https://junglewise.ai/threats/cve-2026-25055-n8n-arbitrary-file-write-via-ssh-node2026-09-25 https://junglewise.ai/threats/cve-2026-25054-n8n-stored-cross-site-scripting-in-markdown-rendering2026-09-25 https://junglewise.ai/threats/cve-2026-25475-openclaw-local-file-inclusion-via-media-path2026-09-25 https://junglewise.ai/threats/cve-2026-25161-alist-path-traversal-in-multiple-file-operation-handlers2026-06-23 https://junglewise.ai/threats/cve-2026-25160-alistgo-alist-improper-certificate-validation-in-storage-drivers2026-06-23 https://junglewise.ai/threats/cve-2026-25053-n8n-os-command-injection-in-git-node2026-09-25 https://junglewise.ai/threats/cve-2026-25052-n8n-arbitrary-file-read-in-file-access-controls2026-09-25 https://junglewise.ai/threats/cve-2026-25051-n8n-improper-csp-enforcement-in-webhook-responses-stored-xss2026-09-25 https://junglewise.ai/threats/cve-2026-25049-n8n-expression-escape-vulnerability-leading-to-rce2026-09-25 https://junglewise.ai/threats/cve-2026-23897-apollo-server-denial-of-service-in-startstandaloneserver2026-09-25 https://junglewise.ai/threats/cve-2026-21893-n8n-command-injection-in-community-package-installation2026-09-25 https://junglewise.ai/threats/cve-2025-61917-n8n-unsafe-buffer-allocation-memory-disclosure-in-task-runner2026-09-25 https://junglewise.ai/threats/cve-2026-23110-linux-kernel-race-condition-in-scsi-core-error-handling2026-07-14 https://junglewise.ai/threats/cve-2026-23103-linux-kernel-race-condition-in-ipvlan-driver2026-07-14 https://junglewise.ai/threats/cve-2026-23100-linux-kernel-hugetlb-incorrect-shared-pmd-table-detection2026-07-14 https://junglewise.ai/threats/cve-2026-23099-linux-kernel-out-of-bounds-read-in-bonding-driver-802-3ad-mode2026-06-19 https://junglewise.ai/threats/cve-2026-23095-linux-kernel-memory-leak-in-generic-udp-encapsulation2026-07-14 https://junglewise.ai/threats/cve-2026-23087-linux-kernel-memory-leak-in-xen-pv-scsi-backend-driver2026-07-14 https://junglewise.ai/threats/cve-2026-23086-linux-kernel-resource-exhaustion-in-vsock-virtio-transport2026-07-14 https://junglewise.ai/threats/cve-2026-23084-linux-kernel-be2net-null-pointer-dereference-in-be-cmd-get-mac2026-07-14 https://junglewise.ai/threats/cve-2026-23083-linux-kernel-resource-leak-in-foo-over-udp-fou-implementation2026-07-14 https://junglewise.ai/threats/cve-2026-23074-linux-kernel-use-after-free-in-net-sched-teql-qdisc2026-06-30 https://junglewise.ai/threats/cve-2026-23066-linux-kernel-rxrpc-memory-corruption-in-recvmsg-queueing2026-06-01 https://junglewise.ai/threats/cve-2026-23060-linux-kernel-null-pointer-dereference-in-crypto-authencesn2026-07-14 https://junglewise.ai/threats/cve-2026-23054-linux-kernel-hv-netvsc-denial-of-service-via-rss-configuration2026-07-14 https://junglewise.ai/threats/cve-2026-23052-linux-kernel-memory-over-allocation-in-ftrace2026-07-04 https://junglewise.ai/threats/cve-2026-20123-cisco-epnm-and-prime-infrastructure-open-redirect-in-web2026-06-29 https://junglewise.ai/threats/cve-2026-20111-cisco-prime-infrastructure-stored-xss-in-web-management-interface2026-06-29 https://junglewise.ai/threats/cve-2026-0661-autodesk-3ds-max-memory-corruption-in-rgb-file-parsing2026-06-03 https://junglewise.ai/threats/cve-2026-0660-autodesk-3ds-max-stack-buffer-overflow-in-gif-parsing2026-06-03 https://junglewise.ai/threats/cve-2026-0538-autodesk-3ds-max-out-of-bounds-write-in-gif-parsing2026-06-03 https://junglewise.ai/threats/cve-2026-0537-autodesk-3ds-max-memory-corruption-in-rgb-file-parsing2026-06-03 https://junglewise.ai/threats/cve-2025-71197-linux-kernel-w1-therm-off-by-one-buffer-overflow-in-alarms-store2026-07-14 https://junglewise.ai/threats/cve-2025-71192-linux-kernel-alsa-double-free-in-snd-ac97-controller-register2026-07-30 https://junglewise.ai/threats/cve-2025-70545-belden-ppc-2k05x-stored-xss-in-cgi-component2026-07-05 https://junglewise.ai/threats/cve-2025-69618-community-platform-tarot-astro-healing-arbitrary-file-overwrite2026-07-05 https://junglewise.ai/threats/cve-2025-5329-martcode-software-delta-course-automation-sql-injection2026-06-05 https://junglewise.ai/threats/cve-2026-1819-karel-electronics-viport-stored-xss2026-06-06 https://junglewise.ai/threats/cve-2025-69621-vladimir-timofeev-comic-book-reader-arbitrary-file-overwrite-via2026-07-05 https://junglewise.ai/threats/cve-2025-69620-moo-chan-song-office-reader-path-traversal-in-file-import2026-07-05 https://junglewise.ai/threats/cve-2026-25223-fastify-validation-bypass-via-content-type-header-manipulation2026-09-25 https://junglewise.ai/threats/cve-2026-1341-avation-light-engine-pro-missing-authentication-in-control2026-06-04 https://junglewise.ai/threats/cve-2020-37094-espocrm-2fa-bypass-via-authentication-token-reuse2026-07-10 https://junglewise.ai/threats/cve-2026-25155-qwik-city-csrf-protection-middleware-regex-parsing-bypass2026-09-25 https://junglewise.ai/threats/cve-2026-25149-qwik-city-open-redirect-in-fixtrailingslash-middleware2026-09-25 https://junglewise.ai/threats/cve-2026-25151-qwik-city-csrf-bypass-via-content-type-header-validation2026-09-25 https://junglewise.ai/threats/cve-2026-25150-builder-io-qwik-city-prototype-pollution-in-form-processing2026-09-25 https://junglewise.ai/threats/cve-2026-25148-qwik-ssr-xss-via-unsafe-virtual-node-serialization2026-09-25 https://junglewise.ai/threats/cve-2026-25547-isaacs-brace-expansion-denial-of-service-via-exponential2026-09-25 https://junglewise.ai/threats/cve-2026-24887-anthropic-claude-code-command-injection-in-find-command2026-09-25 https://junglewise.ai/threats/cve-2026-24053-anthropic-claude-code-path-restriction-bypass-via-zsh-clobber2026-09-25 https://junglewise.ai/threats/cve-2025-62673-tp-link-archer-ax53-and-ax12-heap-based-buffer-overflow-in2026-09-25 https://junglewise.ai/threats/cve-2026-24052-anthropic-claude-code-domain-validation-bypass-in-webfetch2026-09-25 https://junglewise.ai/threats/cve-2026-1664-cloudflare-agents-sdk-insecure-direct-object-reference-in-email2026-09-25 https://junglewise.ai/threats/cve-2025-69970-fuxa-insecure-default-authentication-configuration2026-09-25 https://junglewise.ai/threats/cve-2025-69981-fuxa-unrestricted-file-upload-in-api-endpoint2026-09-25 https://junglewise.ai/threats/cve-2025-69983-fuxa-remote-code-execution-in-project-import2026-09-25 https://junglewise.ai/threats/frangoteam-fuxa-hard-coded-secret-in-jwt-authentication-88d907ce2026-05-11 https://junglewise.ai/threats/fuxa-hard-coded-jwt-secret-key-1946cce62026-09-25 https://junglewise.ai/threats/cve-2025-69848-netbox-reflected-xss-in-protectederror-handling2026-09-25 https://junglewise.ai/threats/cve-2026-24884-compressing-arbitrary-file-write-via-symlink-extraction2026-09-25 https://junglewise.ai/threats/cve-2025-13473-django-user-enumeration-via-timing-attack-in-mod-wsgi-handler2026-09-26 https://junglewise.ai/threats/cve-2025-14550-django-dos-via-inefficient-algorithmic-complexity-in-asgirequest2026-09-26 https://junglewise.ai/threats/cve-2026-1285-django-denial-of-service-in-truncator-html-methods2026-09-26 https://junglewise.ai/threats/cve-2026-1312-django-sql-injection-in-queryset-order-by-and-filteredrelation2026-09-26 https://junglewise.ai/threats/cve-2026-1287-django-sql-injection-in-filteredrelation-column-aliases2026-09-26 https://junglewise.ai/threats/cve-2026-1207-django-sql-injection-in-rasterfield-lookups-on-postgis2026-09-26 https://junglewise.ai/threats/cve-2025-5319-emit-informatics-digita-efficiency-management-system-sql-injection2026-06-05 https://junglewise.ai/threats/cve-2025-7760-ofisimo-association-web-package-flora-xss-via-http-headers2026-06-05 https://junglewise.ai/threats/cve-2025-6397-ankara-hosting-website-design-website-software-reflected-xss2026-06-05 https://junglewise.ai/threats/cve-2025-8461-seres-software-syweb-reflected-xss2026-06-05 https://junglewise.ai/threats/cve-2025-8456-kod8-individual-and-sme-website-reflected-xss2026-06-05 https://junglewise.ai/threats/cve-2025-8590-akce-software-technology-skspro-directory-indexing-information2026-06-05 https://junglewise.ai/threats/cve-2025-8589-akce-skspro-reflected-xss2026-06-05 https://junglewise.ai/threats/cve-2026-22550-elecom-wireless-lan-products-os-command-injection2026-05-12 https://junglewise.ai/threats/cve-2026-20704-elecom-wireless-lan-products-csrf-vulnerability2026-05-12 https://junglewise.ai/threats/cve-2025-70959-tendenci-cms-stored-xss-in-jobs-and-forums-modules2026-09-26 https://junglewise.ai/threats/cve-2025-70960-tendenci-cms-stored-xss-in-forums-and-jobs-modules2026-09-26 https://junglewise.ai/threats/cve-2019-19006-sangoma-freepbx-improper-authentication-in-admin-interface2026-05-15 https://junglewise.ai/threats/cve-2021-39935-gitlab-ce-ee-ssrf-in-ci-lint-api2026-05-15 https://junglewise.ai/threats/cve-2025-40551-solarwinds-web-help-desk-untrusted-data-deserialization2026-05-15 https://junglewise.ai/threats/cve-2026-25157-openclaw-clawdbot-os-command-injection-in-sshnodecommand2026-09-25 https://junglewise.ai/threats/cve-2026-25253-openclaw-clawdbot-authentication-token-exfiltration-via-untrusted2026-09-25 https://junglewise.ai/threats/cve-2026-24763-openclaw-clawdbot-command-injection-via-path-environment-variable2026-09-25 https://junglewise.ai/threats/cve-2026-24737-parallax-jspdf-pdf-injection-in-acroform-module2026-09-25 https://junglewise.ai/threats/cve-2026-24051-opentelemetry-go-sdk-path-hijacking-in-host-id-go-on-macos2026-06-15 https://junglewise.ai/threats/cve-2026-22778-vllm-remote-code-execution-via-jpeg2000-heap-overflow-and-aslr2026-09-26 https://junglewise.ai/threats/cve-2026-1777-aws-sagemaker-python-sdk-hmac-disclosure-and-insecure-tls2026-05-15 https://junglewise.ai/threats/cve-2026-25228-signalk-server-path-traversal-in-applicationdata-api2026-09-25 https://junglewise.ai/threats/cve-2026-25224-fastify-denial-of-service-via-unbounded-memory-allocation-in2026-09-25 https://junglewise.ai/threats/mmaitre314-picklescan-arbitrary-file-creation-via-unsafe-4ff75b522026-07-21 https://junglewise.ai/threats/cve-2026-25481-langroid-rce-via-waf-bypass-in-tablechatagent2026-07-01 https://junglewise.ai/threats/cve-2026-25142-sandboxjs-prototype-pollution-vulnerability-leading-to-sandbox2026-09-25 https://junglewise.ai/threats/cve-2026-24133-jspdf-denial-of-service-via-unvalidated-bmp-dimensions2026-09-25 https://junglewise.ai/threats/cve-2026-24043-jspdf-xml-injection-in-addmetadata-function2026-09-25 https://junglewise.ai/threats/cve-2026-24040-jspdf-shared-state-race-condition-in-addjs-plugin2026-09-25 https://junglewise.ai/threats/cve-2026-22226-tp-link-archer-command-injection-in-vpn-server-configuration2026-06-04 https://junglewise.ai/threats/cve-2026-22223-tp-link-archer-be230-and-be3600-os-command-injection-in-vpn2026-09-25 https://junglewise.ai/threats/cve-2026-22221-tp-link-archer-be230-and-be3600-os-command-injection2026-09-25 https://junglewise.ai/threats/cve-2026-0631-tp-link-archer-routers-os-command-injection-in-vpn-modules2026-07-31 https://junglewise.ai/threats/cve-2026-23515-signal-k-set-system-time-plugin-command-injection-rce2026-09-25 https://junglewise.ai/threats/cve-2026-25152-backstage-techdocs-node-path-traversal-in-local-generator2026-09-25 https://junglewise.ai/threats/cve-2026-1761-gnome-libsoup-stack-based-buffer-overflow-in-multipart-response2026-06-30 https://junglewise.ai/threats/cve-2026-1757-libxml2-xmllint-memory-leak-in-interactive-shell2026-09-25 https://junglewise.ai/threats/cve-2025-8587-akce-software-technology-skspro-sql-injection2026-06-05 https://junglewise.ai/threats/cve-2026-1518-keycloak-ssrf-in-client-registration-and-backchannel-notification2026-07-24 https://junglewise.ai/threats/cve-2026-1531-foreman-foreman-kubevirt-insecure-default-ssl-verification2026-06-30 https://junglewise.ai/threats/cve-2026-1530-red-hat-fog-kubevirt-disabled-certificate-validation-mitm2026-06-30 https://junglewise.ai/threats/openclaw-clawdbot-token-exfiltration-via-unvalidated-gatewayurl-f06c10142026-09-25 https://junglewise.ai/threats/cve-2026-23835-lobehub-improper-authorization-in-presigned-file-upload2026-09-25 https://junglewise.ai/threats/cve-2026-25069-sunfounder-pironman-dashboard-path-traversal-in-log-api2026-07-14