GHSA-Q2XC-RRXJ-58X9 Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header

Summary The Pydantic AI development web chat UI Agent.toweb, clai web does not validate the Host header of incoming requests. A website a developer visits can use DNS rebinding to make requests to a chat UI running on that developer's machine appear same-origin to the browser, causing the served...

GHSA-H4XC-3QFQ-JF93 Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpoint

Summary The Pydantic AI development web chat UI Agent.toweb, clai web did not check the content type of requests to its chat endpoint. This allowed a website visited by a developer to submit a request to a chat UI running on that developer's machine, causing the served agent to run and to execute...

CVE-2026-36374

描述 已发现一个公共端点，允许使用可预测的标识符（证书代码）进行证书查询，且无需任何身份验证或授权机制。 通过枚举该标识符，攻击者可以访问第三方个人数据，包括全名、CPF（巴西个人纳税人登记号）、RG（巴西身份证号）、出生日期和出生地。 同时还观察到，即使证书持有人选择在专业网络或其他平台上公开分享其带有部分脱敏个人数据的文凭，证书标识符通常仍然可见。通过该标识符，可以直接查询端点并获取完整数据，完全绕过界面中实施的脱敏机制。 受影响的端点 https://www.fiap.com.br/consultadocumento 载荷示例 8 字符标识符 概念验证（PoC）...

CVE-2023-22527

CVE-2023-22527 一个用于利用存在 CVE-2023-22527 漏洞的 Confluence 服务器的利用工具，该漏洞可导致 RCE，并已在存在漏洞的 Confluence Data Center 和 Server 实例上经过测试和验证。通过该漏洞，攻击者可以在存在漏洞的实例上执行任意代码。 安装： git clone https://github.com/sanjai-AK47/CVE-2023-22527.git cd CVE-2023-22527 pip install -r requirements.txt python3 exploit.py -h 使用方法：...

CVE-2026-22730-Scanner

CVE-2026-22730 扫描器与利用工具 – Spring AI MariaDB 向量存储 SQL 注入 一款针对 CVE-2026-22730 的专业安全评估工具——该漏洞是 Spring AI 的 MariaDB 向量存储中发现的一个严重 SQL 注入漏洞。此工具允许获得授权的渗透测试人员和安全研究人员检测并安全地利用该漏洞，用于教育或防御目的。 📖 概述 CVE-2026-22730 影响使用 MariaDB 向量存储的 Spring AI 1.0.x 1.0.4 和 1.1.x 1.1.3...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-59888 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and...

CVE-2026-21876

CVE-2026-21876（OWASP CRS WAF 绕过） CVE-2026-21876 docker 容器 + 最小化 PoC。 我分别感谢 @airween 和 @fzipi 的快速响应！漏洞修复在很短的时间内就准备好了。 PoC POST /submit HTTP/1.1 Host: localhost User-Agent: curl/8.17.0 Accept: / Origin: https://example.com Content-Length: 367 Content-Type: multipart/form-data;...

CVE-2023-22527-POC

CVE-2023-22527 &color=brighgreen%3E 描述 旧版本的 Confluence Data Center 和 Server 中存在一个模板注入漏洞，允许未经身份验证的攻击者在受影响实例上实现 RCE。使用受影响版本的客户必须立即采取行动。大多数最新受支持的 Confluence Data Center 和 Server 版本不受此漏洞影响，因为该漏洞在常规版本更新中最终得到了缓解。但是，Atlassian 建议客户注意安装最新版本，以保护其实例免受 Atlassian 一月安全公告中概述的非关键漏洞的影响。 产品| 受影响版本 ---|--- Confluen...

Blackash-CVE-2025-61884

CVE-2025-61884 新 Oracle E-Business Suite 漏洞可让黑客无需登录即可访问数据 💀 CVE-2025-61884 — 完整摘要 🧾💥 字段| 详情 ---|--- 标识符| CVE-2025-61884 产品| Oracle E-Business Suite — Oracle Configurator（运行时界面） 受影响版本| 12.2.3 → 12.2.14 攻击向量| 网络（HTTP）— 未认证 访问 影响| 机密性（未经授权的数据泄露） CVSSv3.1 基础评分| 7.5（高危） — AV:N/AC:L/PR:N/UI:N/C:H/I:N/A...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and...

EUVD-2026-95107

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provided input buffer while computing the value. Applications that retain or reuse encoded input for integrity checks,...

CVE-2026-107296 msgpack5: Decoding negative int64 values mutates the input buffer

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provided input buffer while computing the value. Applications that retain or reuse encoded input for integrity checks,...

CVE-2026-107296

The msgpack5 library, a msgpack v5 implementation for Node.js and the browser , contains a vulnerability in versions prior to 6.1.0 . When decoding a negative signed 64-bit integer , the library modifies the corresponding bytes in the caller-provided input buffer during value computation. This ca...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-84064 DESCRIPTION: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special...

EUVD-2026-95105

Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object Injection.This issue affects MainWP Child: from n/a through 6.2.1...

CVE-2026-105436

The MainWP Child WordPress plugin (versions 6.2.1 and below ) is vulnerable to a Deserialization of Untrusted Data vulnerability. This flaw allows for Object Injection , which can lead to significant impacts on confidentiality, integrity, and availability. No specific remediation or exploit detai...

CVE-2026-105436 WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object Injection.This issue affects MainWP Child: from n/a through 6.2.1...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affecting Tivoli Netcool/OMNIbus

Summary Vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by Tivoli Netcool/OMNIbus have been addressed. Vulnerability Details CVEID:CVE-2026-47057 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via...

kernel: ipv6: fix use-after-free in ip6_finish_output2()

A flaw was found in the Linux kernel's IPv6 networking stack. A use-after-free vulnerability exists in the ip6finishoutput2 function, where a cached pointer to the IPv6 destination address can become stale after memory reallocation. An attacker could potentially exploit this to leak sensitive...

kernel: gfs2: Fix slab-use-after-free in qd_put

A flaw was found in the Linux kernel's GFS2 file system. During filesystem shutdown, quota data objects were freed without being properly removed from the Least Recently Used LRU list. This oversight could lead to a use-after-free vulnerability, where the system attempts to access memory that has...