Security Check

Microsoft Developer Tools: Mehrere Schwachstellen

CVE-2026-114171Microsoft Visual Studio 2022, Red Hat Enterprise Linux, Microsoft ASP.NET, Microsoft Azure DevOps Server, Microsoft…10. Nov 2026

Visual Studio Code Security Feature Bypass Vulnerability

Original bei Microsoft Alle Quellen (2)

Hoch 8.8Software

OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document

CVE-2026-118670@ohif/extension-dicom-pdf, @ohif/extension-dicom-pdf, @ohif/extension-dicom-pdf10. Nov 2026

### Summary An XSS (Cross-Site Scripting) vulnerability occurs when an attacker is able to inject their own JavaScript code into a web page's source, which is subsequently processed by the victim's browser. A common cause of this vulnerability is the failure to validate user-supplied data before displaying it within the vulnerable application without proper filtering. To exploit the vulnerability, an attacker must input HTML code into a vulnerable parameter containing…

Original bei GitHub Alle Quellen (1)

Hoch 7.5Software

Forge: RSA PKCS#1 v1.5 signature forgery via non-canonical DigestInfo encoding

CVE-2026-119192node-forge10. Nov 2026

### Summary RSASSA-PKCS1-v1_5 signature verification (`publicKey.verify()` with the default scheme, also used by X.509 certificate and PKCS#7 verification) accepted non-canonical BER encodings of the DigestInfo, such as NULL parameters with content and non-minimal lengths. These leave attacker-controlled bytes inside an accepted DigestInfo, which allows signatures to be forged without the private key for RSA keys with a low public exponent (e=3). Fixed in node-forge 1.4.1…

Original bei GitHub Alle Quellen (1)

Hoch 8.8Software

AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution

CVE-2026-113663ag2, autogen10. Nov 2026

### Summary SandboxShellTool's restricted modes — allowed=[...] (explicit command allowlist) and readonly=True (implicit READONLY_COMMANDS allowlist) — can both be bypassed by embedding a newline character inside the command string. The filter only inspects a single-line set of shell metacharacters, but execution runs the raw string through `sh -c`, where a shell treats an embedded newline exactly like a `;` statement separator. An agent (or content that steers the agent…

Original bei GitHub Alle Quellen (1)

Hoch 7.5Software

Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API

CVE-2026-102650@nuxt/content10. Nov 2026

### Summary The `POST /__nuxt_content/:collection/query` endpoint in `@nuxt/content` accepts an attacker-controlled `sql` field from the HTTP request body and executes it against a local SQLite database after passing it through an insufficient validator (`assertSafeQuery`). The validator only blocks a small set of SQL command keywords and does not reject expensive SQLite built-in functions such as `randomblob()`, `zeroblob()`, `hex()`, or `length()`. An unauthenticated…

Original bei GitHub Alle Quellen (1)

Hoch 7.0Software

Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives.

CVE-2026-11435910. Nov 2026

Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives. A malicious or compromised HTTP(S) server, or an attacker able to tamper with a plain-HTTP download, can stream an arbitrarily large (or endless) response. Kura writes the response to local storage until the filesystem is full. On gateways the temporary directory is often a RAM-backed tmpfs, so this can also exhaust memory. The result is denial of service…

Original bei NVD Alle Quellen (1)

Hoch 7.7Software

In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web UI, and the Wire Service REST API v1 (available since 5.1.0…

CVE-2026-11342210. Nov 2026

In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web UI, and the Wire Service REST API v1 (available since 5.1.0, org.eclipse.kura.rest.wire.provider), determine whether a configuration update targets a Wire Component, Driver or Asset from the factory identifier supplied in the request, instead of the actual factory of the existing component. An authenticated identity holding only the Wires management permission (kura.wires.admin…

Schwachstellen, die jetzt zählen.