New vulnerabilities – clearly explained

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Voki Bot: Improper export of ShortcutDispatchActivity allows unauthorized automation replay

Voki Bot for Android (net.canvoki.vokibot) exports the ShortcutDispatchActivity component without a permission check. A malicious app on the same device can start it with a known trigger ID and make Voki Bot execute the user's configured automations, for example launching system settings. The attacker needs no permissions and no user interaction, but the trigger and automation must already exist in the victim's app data.

canvoki · Voki Bot

Research and translation in progress – available shortly.

Simple Contacts Pro: Improper export of content provider exposes private contacts

Simple Contacts Pro versionCode 107 (and according to the advisory also 108) declares an exported content provider without any permission requirement. Any app installed on the same Android device can query it and read private local contacts, including names, phone numbers, birthdays and anniversaries, if the hidden-contacts setting is enabled, which is the default. The provider is read-only, and no code execution or privilege escalation is claimed. The NVD record lists CVSS 9.1 with network attack vector, which does not match the local nature of this flaw described in the advisory.

Simple Mobile Tools · Simple Contacts Pro

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Crocoblock JetEngine: SQL injection in WordPress plugin

The WordPress plugin JetEngine by Crocoblock, up to and including version 3.9.0.1, contains an SQL injection vulnerability (CWE-89, CVE-2026-39736). An attacker with a low-privileged account, which Patchstack lists as Contributor, can send crafted input to read, modify or delete database content, including user data. The CVSS score is 8.5 according to the CNA, but NVD analysis is pending and the sources disagree on the score.

Crocoblock · JetEngine

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

llama.cpp ggml-rpc server: Denial of service via oversized message length

llama.cpp builds from b2877 up to b11935 contain an uncaught exception in the ggml-rpc server (rpc-server), used for distributed inference across machines. After the HELLO handshake, an unauthenticated remote attacker can send a command such as SET_TENSOR with a length above the maximum vector size, which aborts the process and makes the service unavailable to all clients. Only confidentiality and integrity are unaffected; the impact is availability. Exposure of the RPC port is the main risk factor.

ggml-org · llama.cpp

flat: Denial of service via unflatten() with numeric array index keys

The JavaScript npm library flat through version 6.0.1 allows attackers to create huge sparse arrays through unbounded numeric keys in unflatten(). Attackers can supply flattened keys such as a.4294967294, which causes iteration with forEach, spread or JSON.stringify to block the Node.js event loop. The attack is only relevant if an application passes attacker-controlled keys into unflatten(), and the impact is limited to availability.

hughsk · flat

Agno PandasTools: Code execution via unsafe reflection

Agno through 3.1.11 contains an unsafe reflection flaw in the PandasTools toolkit. The tool passes model-supplied function names to getattr() on pandas, so an attacker who can influence the agent's input (for example through prompt injection in documents or messages) can make it call pandas.read_pickle on attacker-controlled paths to execute code, or call other readers to read local files. The CVSS 4.0 score is 9.2 (critical), and the reporter states that the default configuration is affected.

agno-agi · Agno

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.