CVEs published January 30, 2026

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands…

The GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while checking out and executing untrusted pull request code.

An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path…

Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification.

The CAI (Cybersecurity AI) framework contains multiple argument injection vulnerabilities in its function tools.

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative…

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through…

A SQL Injection vulnerability exists in endpoint `/PaddleNumEditor.php` in ChurchCRM prior to version 6.7.2.

A security flaw has been discovered in Totolink A3600R 5.9c.4959.

Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic packet to activate telnet service on the box.

An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.

Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

Improper access control in the WCF endpoint in Edgemo (now owned by Danoffice IT) Local Admin Service 1.2.7.23180 on Windows allows a local user to escalate their privileges to local administrator via…

When TechDocs is configured with `runIn: local`, a malicious actor who can submit or modify a repository's `mkdocs.yml` file can execute arbitrary Python code on the TechDocs build server via MkDocs hooks…

fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.

HotCRP is conference review software.

A security vulnerability has been detected in itsourcecode School Management System 1.0.

A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon.

A security vulnerability has been detected in itsourcecode Directory Management System 1.0.

A weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon.

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the device by crafting specific messages.

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation.

An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP authentication server through an exposed…

The doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.

PsySH automatically loads and executes a `.psysh.php` file from the Current Working Directory (CWD) on startup.

A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0.

A vulnerability has been found in bolo-solo up to 2.6.4.

A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16.

When a user initiates a "Share via Link" session, the LocalSend application starts a local HTTP server to host the selected files.

The file upload feature in `Knowledge Base > File Upload` does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters.

Versions prior to 6.7.2 have a Stored Cross-Site Scripting (XSS) vulnerability occurs in Create Events in Church Calendar.

A path traversal vulnerability in the TechDocs local generator allows attackers to read arbitrary files from the host filesystem when Backstage is configured with `techdocs.generator.runIn: local`.

The `NativeAuthenticationStrategy.authenticate()` method is vulnerable to a timing attack that allows attackers to enumerate valid usernames (email addresses).

A vulnerability was found in Free5GC SMF up to 4.1.0.

A vulnerability has been found in Free5GC SMF up to 4.1.0.

A flaw has been found in Free5GC SMF up to 4.1.0.

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages.

A flaw has been found in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon.

Improper handling of filenames in certain HIKSEMI NAS products may lead to the exposure of sensitive system files.

Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization.

A vulnerability was identified in D-Link DIR-823X 250416.

A weakness has been identified in projectworlds House Rental and Property Listing 1.0.

Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126.