Archive
12 February 2026
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Critical 10.0
Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed…
-
High 8.8CVE-2026-2005 Public exploit
PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
-
High 7.8CVE-2026-25676 Public exploit
The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely …
-
High 7.5CVE-2026-26235 Public exploit
JUNG Smart Visu Server 1.1.1050 - 'JUNG Smart Visu Server' Missing Authentication
JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remotely shutdown or reboot the server. Attackers can send a single POST request to trigger the server reboot without requiring any authenticat…
-
High 7.5CVE-2025-70886 Public exploit
An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the…