| CVE-2026-116256 geesondog RhaPHP up to 7ae639ccf8dcb627faace096d030bd4cb4cfb905 Mp Module Media Proxy Show.php image url server-side request forgery | A vulnerability categorized as critical has been discovered in geesondog RhaPHP up to 7ae639ccf8dcb627faace096d030bd4cb4cfb905. Affected by this vulnerability is the function image of the file applica | Sun, 25 Oct 2026 18:33:49 +0100 |
| CVE-2026-116255 PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990 URI Sanitizer doc.php _detail uri_string path traversal | A vulnerability was found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. It has been rated as problematic. Affected is the function _detail of the file application/controllers/doc. | Sun, 25 Oct 2026 18:28:24 +0100 |
| CVE-2026-115825 HTTP::Server::PSGI up to 1.0055 sysread allocation of resources | A vulnerability was found in HTTP::Server::PSGI up to 1.0055. It has been declared as problematic. This impacts the function sysread. Executing a manipulation can lead to allocation of resources.Thi | Sun, 25 Oct 2026 18:14:18 +0100 |
| CVE-2026-115824 Miyagawa Starman up to 0.4018 Chunked Body Decoder memory allocation | A vulnerability was found in Miyagawa Starman up to 0.4018. It has been classified as problematic. This affects an unknown function of the component Chunked Body Decoder. Performing a manipulation res | Sun, 25 Oct 2026 18:13:54 +0100 |
| CVE-2026-115822 miyagawa Starman up to 0.4018 resource consumption | A vulnerability was found in miyagawa Starman up to 0.4018 and classified as critical. The impacted element is an unknown function. Such manipulation leads to resource consumption.This vulnerability | Sun, 25 Oct 2026 18:13:53 +0100 |
| CVE-2026-115823 Starman up to 0.4018 race condition | A vulnerability has been found in Starman up to 0.4018 and classified as critical. The affected element is an unknown function. This manipulation causes race condition.The identification of this vul | Sun, 25 Oct 2026 18:13:48 +0100 |
| CVE-2026-115817 miyagawa Starman up to 0.4018 Request Body resource consumption | A vulnerability, which was classified as problematic, was found in miyagawa Starman up to 0.4018. Impacted is an unknown function of the component Request Body. The manipulation results in resource co | Sun, 25 Oct 2026 18:13:26 +0100 |
| CVE-2026-116254 rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d PayPal IPN PaymentNotifyRequest.php verifyiprange X-Real-IP origin validation | A vulnerability, which was classified as critical, has been found in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d. This issue affects the function verifyiprange of the file lib/Flux/P | Sun, 25 Oct 2026 17:39:39 +0100 |
| CVE-2026-116253 DedeCMS 5.7.118 Advertisement Rendering plus/ad_js.php _RunMagicQuotes aid code injection | A vulnerability classified as critical was found in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::_RunMagicQuotes of the file plus/ad_js.php of the component Advertisement R | Sun, 25 Oct 2026 17:35:31 +0100 |
| CVE-2026-116237 Oray Pugongying X5 Pro 7.6.1 Dnsmasq crlf injection | A vulnerability classified as critical has been found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the component Dnsmasq. Performing a manipulation results in crlf injection.This | Sun, 25 Oct 2026 16:26:07 +0100 |