IBM Concert versions 1.0.0 through 3.0.0 contain a use-after-free vulnerability (CWE-416) where the software references or accesses memory after it has been freed. This memory corruption issue can be exploited by an attacker able to influen

The vulnerability in tobychui's Zoraxy product affects versions 3.2.3 through 3.3.4. The software fails to correctly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers, specifically the X-Forwarded-For header. This

This vulnerability involves two path traversal flaws in the Network Installation Service component of Altium Enterprise Server. An unauthenticated network attacker can exploit these flaws to write arbitrary files to any writable location on

CVE-2026-41947 is an authorization bypass vulnerability in langgenius's Dify product (version 1.14.1 and prior). Authenticated users with editor privileges can exploit missing tenant ownership checks in trace configuration endpoints to set

The vulnerability identified as CVE-2026-1490 affects the CleanTalk Spam protection, Honeypot, Anti-Spam plugin for WordPress, a widely used security plugin designed to prevent spam and malicious activity. The root cause is a reliance on re

CVE-2026-26215 is a critical vulnerability in the manga-image-translator software, specifically versions beta-0.3 and earlier, which operate in shared API mode. The core issue is unsafe deserialization of untrusted data via Python's pickle.