CVEs published June 29, 2026

Performer Arbitrary File Deletion in Paid Videochat Turnkey Site <= 7.4.8 versions.

Remote attackers can exfiltrate the entire database including user records, items, and feedback data containing personally identifiable information, or completely overwrite the dataset without authentication.

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows…

Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that…

Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment…

Coolify's API controllers consistently validate server ownership with Server::whereTeamId($teamId) before any operation.

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged.

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector.

This issue was addressed with improved input validation.

An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component

A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox.

luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus method where the cl_meta parameter is interpolated into a shell command without…

luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RPC method that allows authenticated users to execute arbitrary commands as root.

Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox context, enabling git directory confusion attacks.

A use-after-free issue was addressed with improved memory management.

A use-after-free issue was addressed with improved memory management.

A type confusion issue was addressed with improved checks.

Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10.

FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment upload handler that allows authenticated attackers to execute arbitrary code by uploading files with traversal…

A critical Authenticated Host Remote Code Execution (RCE) vulnerability was discovered in Coolify.

An authenticated command injection vulnerability in the Destination Network Management functionality allows users with destination management permissions to execute arbitrary commands as root on managed…

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to…

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment.

A vulnerability has been found in Edimax EW-7478APC 1.04.

A flaw has been found in Edimax EW-7478APC 1.04.

A security vulnerability has been detected in Edimax EW-7478APC 1.04.

A vulnerability was found in Edimax EW-7478APC 1.04.

A vulnerability has been found in Edimax EW-7478APC 1.04.

A flaw has been found in Edimax EW-7478APC 1.04.

A vulnerability has been found in D-Link DCS-935L 1.10.01.

A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425.

A vulnerability was found in Tenda JD12L 16.03.53.23.

A vulnerability has been found in Tenda JD12L 16.03.53.23.

A flaw has been found in Tenda JD12L 16.03.53.23.

A vulnerability was detected in Tenda JD12L 16.03.53.23.

A security vulnerability has been detected in Tenda JD12L 16.03.53.23.

A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code.

Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and uses a hardcoded default HMAC key, allowing unauthenticated attackers to compute valid HMACs for arbitrary URLs.

SzafirHost verifies the downloaded native library archive with one JarFile parser (reading the Central Directory) but extracts native libraries with JarInputStream parser (reading sequentially from local…

SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-encoded quotes into the rule ID path parameter of…

Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook registration endpoint that allows authenticated users to register internal URLs due to missing SSRF protection.

Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution.

Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessive Allocation.

The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) used an incorrect boolean expression that combined the RFC 4861 validity checks with the…

ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderController that allows attackers with erp:sale-out permissions to gain unauthorized…

The issue was addressed with improved checks.

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the get_gl_transactions() function where the filter_type parameter is concatenated directly into a SQL IN() clause without…

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handler that allows authenticated attackers with SA_GLANALYTIC permission to execute arbitrary SQL queries by…

PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DACL that grants GENERIC_READ and GENERIC_WRITE permissions to all authenticated users.

The issue was addressed with improved input sanitization.

libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode.

Coolify server and project lookups are not scoped to the current team, allowing any authenticated user to access servers and projects belonging to other teams by specifying their IDs directly.

Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that serves files from a configured root…

Modoboa before 2.9.0 contains an insecure direct object reference vulnerability in the PUT /api/v1/accounts/{pk}/password/ endpoint that allows domain administrators to change any user's password.

phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploaded-files database table by visiting any page…

JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth.

The regexp versus division disambiguator in JsTokenizeString (XS.xs) inspects the previous token's last byte to choose between a regexp literal and a division operator.

Home Assistant is open source home automation software that puts local control and privacy first.

A buffer overflow in the Get_Attribute_List function of EIPStackGroup OpENer commit 76b95c allows attackers to cause a Denial of Service (DoS) via supplying a crafted Common Packet Format (CPF) packet.

A heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 v2.3.3 to v2.3.6 allows attackers to cause a Denial of Service (DoS) via a crafted payload.

A heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7_server.cpp) of snap7 v1.4.3 allows attackers to cause a Denial of Service (DoS) via a crafted packet.

The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters.

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution.

The HMAC key is the application's manual_webhook_secret_github field, which is used by Coolify's webhook endpoints to validate incoming requests, is nullable with no default — meaning newly created…

Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs.

The APCu Manager WordPress plugin before 4.5.0 does not escape APCu object-cache keys before rendering them in an admin-area page, leading to a Stored Cross-Site Scripting vulnerability.

Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct…

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped.

Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through the IPC channel.

A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4.

A weakness has been identified in SourceCodester Inventory Management System 1.0.

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0.

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php.

A weakness has been identified in code-projects Real State Services 1.0.

A vulnerability was found in itsourcecode Online Hotel Management System 1.0.

A flaw has been found in itsourcecode Online Hotel Management System 1.0.

A vulnerability was detected in itsourcecode Online Hotel Management System 1.0.

A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0.

A weakness has been identified in itsourcecode Baptism Information Management System 1.0.

A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4.

A vulnerability was found in Feehi CMS up to 2.1.1.

A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.04-jdk8-SNAPSHOT.

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0.

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0.

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.php.

A flaw was found in libtiff.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy allows Path Traversal.

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions.

Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions.

Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions.

Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions.

Unauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions.

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a…

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local…

The issue was addressed with improved input validation.

The issue was addressed with improved checks.

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Bank Statement report handler that allows authenticated attackers to extract arbitrary database data by injecting UNION SELECT…

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl.

Eclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of-bounds read vulnerability in the check_server_certificate() function that allows unauthenticated attackers to…

Uncontrolled Recursion vulnerability in leandrocp mdex allows denial of service via deeply nested Markdown input. mdex converts between an Elixir %MDEx.Document{} struct and Comrak's internal AST using two…

Missing Release of Memory after Effective Lifetime vulnerability in leandrocp mdex and mdex_native allows an attacker who controls a rendered document to cause a denial of service through unbounded native…

Memory Allocation with Excessive Size Value vulnerability in leandrocp mdex allows an unauthenticated attacker to cause a denial of service through unbounded memory allocation.…

The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates that string into three log statements before any validation gate.

Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the pinpointJwt session cookie due to missing HttpOnly and Secure attributes, enabling…

A flaw was found in the libblkid library of util-linux.

An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14.

Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control, allowing unauthenticated access to retrieve full attendee lists including emails and personal information.

Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table with an always-satisfied _or condition that bypasses operation-scoped access controls.

ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module's GET /admin-api/crm/follow-up-record/get endpoint that allows authenticated users to…

Unauthenticated Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.9.0 versions.

Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions.

Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.

Subscriber Broken Access Control in Ads by WPQuads <= 3.0.3 versions.

Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions.

Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions.

Subscriber Cross Site Scripting (XSS) in WooCommerce Designer Pro <= 1.9.34 versions.

Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-out…

Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring any method or method omission configured as part of the constraint.

Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component.

A use-after-free issue was addressed with improved memory management.

An out-of-bounds write issue was addressed with improved input validation.

A use-after-free issue was addressed with improved memory management.

The issue was addressed with improved memory handling.

A use-after-free issue was addressed with improved memory management.

A path handling issue was addressed with improved validation.

A use-after-free issue was addressed with improved memory management.

A use-after-free issue was addressed with improved memory management.

This issue was addressed through improved state management.

A use-after-free issue was addressed with improved memory management.

A stack overflow was addressed with improved input validation.

A use-after-free issue was addressed with improved memory management.

The issue was addressed with improved memory handling.

A permissions issue was addressed with additional restrictions.

The issue was addressed with improved memory handling.

A use-after-free issue was addressed with improved memory management.

A memory corruption issue was addressed with improved memory handling.

A double free issue was addressed with improved memory management.

The issue was addressed with improved memory handling.

A cross-origin issue was addressed with improved tracking of security origins.

A use-after-free issue was addressed with improved memory management.

An out-of-bounds access issue was addressed with improved bounds checking.

The issue was addressed with improved memory handling.

The issue was addressed with improved memory handling.

Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to escalate privileges via the IdentityServer account profile endpoint

An out-of-bounds access issue was addressed with improved bounds checking.

CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away.

Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to obtain reusable, potentially…

SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store…

Subscriber Broken Access Control in MainWP <= 6.1.1 versions.

acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic…

Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file content to be read and transmitted to Snowflake services.

A vulnerability was detected in Edimax EW-7478APC 1.04.

A weakness has been identified in itsourcecode Hospital Management System 1.0.

A security flaw has been discovered in itsourcecode Hospital Management System 1.0.

A vulnerability has been found in itsourcecode Hospital Management System 1.0.

A vulnerability was detected in Edimax EW-7478APC 1.04.

A security vulnerability has been detected in Edimax EW-7478APC 1.04.

A vulnerability was identified in itsourcecode Hospital Management System 1.0.

A flaw has been found in Feehi CMS up to 2.1.1.

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0.

A weakness has been identified in itsourcecode Hospital Management System 1.0.

A security flaw has been discovered in GitBucket up to 4.46.1.

A vulnerability was determined in Wavlink WL-NU516U1-A M16U1_V240425.

A flaw has been found in CodeAstro Human Resource Management System 1.0.

A weakness has been identified in itsourcecode Hospital Management System 1.0.

A security flaw has been discovered in itsourcecode Hospital Management System 1.0.

A vulnerability was identified in itsourcecode Hospital Management System 1.0.

A vulnerability was detected in CodeAstro Human Resource Management System 1.0.

A vulnerability was determined in itsourcecode Hospital Management System 1.0.

A flaw was found in p11-kit.

mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() on the result of smp_packet_alloc() before checking it for NULL. smp_packet_alloc() uses…

Mixpost through 2.6.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in authenticated users' browsers by crafting malicious…

Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat.

The Claude Code /copy command wrote responses to a hardcoded, predictable path (/tmp/claude/response.md) without UID isolation, randomness, or symlink protection.

Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution.

Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation validates usage count before asynchronous UpdateEventStatisticsJob increments it, allowing attackers to redeem…

LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that allows authenticated users to grant themselves access to other users' private photos…

Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability.

A security flaw has been discovered in seladb PcapPlusPlus 25.05.

A vulnerability was identified in seladb PcapPlusPlus 25.05.

A vulnerability was determined in seladb PcapPlusPlus 25.05.

A vulnerability was detected in Documenso up to 2.11.0.

A vulnerability was determined in YzmCMS up to 7.5.

A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6.

The following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agp_amd64_probe() A NULL pointer dereference was observed in the AMD64 AGP driver when running in a virtualized…

The issue was addressed with improved input sanitization.

Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials to be written to persistent local debug logs.

Mythic before 3.4.0.60 contains an authorization bypass vulnerability that allows authenticated spectator-role users to perform unauthorized write operations by accessing the…

A security flaw has been discovered in CodeAstro Complaint Management System 1.0.

Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2profile_config_check_webhook, c2profile_redirect_rules_webhook, c2profile_get_ioc_webhook,…

LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address() function that allows unauthenticated attackers to spoof client IP addresses by…

Teable before 2026-06-15T04-43-24Z.1912 contains an improper access control vulnerability that allows anonymous attackers to access hidden field data by supplying arbitrary field IDs in the projection…

A use-after-free issue was addressed with improved memory management.

A flaw has been found in SourceCodester Simple Food Ordering System 1.0.

A security vulnerability has been detected in agentejo Cockpit CMS up to 0.12.2.

The USB CDC-NCM device class (subsys/usb/device_next/class/usbd_cdc_ncm.c) ignores the return value of usbd_ep_enqueue() in its ethernet transmit callback cdc_ncm_send().

A flaw was found in spice-vdagent.

Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':to_delta/2…

A weakness has been identified in DeepMyst Mysti 0.4.0.

A vulnerability was detected in CherryHQ cherry-studio up to 1.9.7.

A security flaw has been discovered in MyScale MyScaleDB up to 1.8.0.

Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not explicitly configured, allowing acceptance of HS384 and HS512 tokens alongside HS256.

Papermark through 0.22.0 contains a cross-origin resource sharing (CORS) misconfiguration vulnerability that allows unauthenticated remote attackers to perform credentialed cross-origin requests by…

A race condition was addressed with improved state handling.

GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling.

A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1.

A path traversal vulnerability was found in spice-vdagent.

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above…

Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSortingRules, allowing attackers to sort collections by forbidden fields.

PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authenticated non-admin users to modify other users' profile information by sending requests to arbitrary user…

Authorization Bypass Through User-Controlled Key vulnerability in Matteo Manna Simple User Avatar allows Exploiting Incorrectly Configured Access Control Security Levels.

HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs.

The issue was addressed with improved input validation.

A security flaw has been discovered in code-projects Online Music Site 1.0.

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0.

A vulnerability was determined in itsourcecode Online Hotel Management System 1.0.

A vulnerability has been found in itsourcecode Online Hotel Management System 1.0.

A vulnerability was found in CodeAstro Human Resource Management System 1.0.

A vulnerability has been found in GotoHTTP up to 10.2.

A security flaw has been discovered in Investintech SlimPDFReader up to 2.0.14.

Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery.

Invidious before version 2.20260626.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve private playlist contents by accessing the RSS feed playlist endpoint…

CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path.

A vulnerability was found in seladb PcapPlusPlus 25.05.

Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution.

A vulnerability was detected in SourceCodester Inventory Management System 1.0.

A security flaw has been discovered in CodeAstro Complaint Management System 1.0.

A vulnerability was determined in llvm llvm-project up to 22.1.6.

A vulnerability was found in llvm llvm-project up to 22.1.6.

A weakness has been identified in GPAC up to 26.02.0.

A weakness has been identified in Chess Play and Learn App up to 4.9.42 on Android.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in leandrocp MDEx allows stored or reflected cross-site scripting via attacker-controlled Markdown.