CVE-2026-105207 ZITADEL before 4.17.3 Account Takeover via External IdP Linking

ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers without verifying a primary factor or the caller's permission, including on identify-only Login V2 sessions and via the User Service V2 AddIDPLink endpoint. An unauthenticated...

FreePBX-SQLi-Exploit-Privilege-escalation

FreePBX: 認証なしSQLインジェクションからルートシェルへの道のり CVE-2025-57819 • FreePBX 16.0.40.7 • HTB Connected 📋 エグゼクティブサマリー このウォークスルーは、HTBマシンConnected の完全な侵害プロセスを文書化したものです。 攻撃チェーンは、FreePBXの認証なしSQLインジェクションの脆弱性から始まり、細工したcronジョブを介してasteriskユーザーとしてのコード実行を獲得します。その後、書き込み可能な設定ファイルとincronトリガーを組み合わせることで、rootへの権限昇格が可能になります。...

SUSE-SU-2026:4440-1 Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-fr...

Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free i...

CVE-2025-57819

CVE-2025-57819 이 취약점 개요는 @jfinstrom 여기에서 인용한 것입니다. 2025년 8월 21일경 다수의 FreePBX 시스템에서 오류가 발생하기 시작했으며 이후 침해가 확인되었습니다. 벤더Sangoma/FreePBX 보안 팀는 2025년 8월 26일에 관리자 제어판에 대한 공개 액세스를 제한하고 EDGE 모듈 수정을 제공하라는 권고를 발표했습니다. 이 취약점은 상업용 Endpoint ManagerEndpoint와 관련되어 있으며, 관리자 UI가 적대적인 네트워크에 노출될 때 악용될 수 있는 인증되지 않은 권...

CVE-2025-50154

NTLM/SMB 強化＆脅威ハントツールキット 著者: w01f バージョン: 1.0 目的: 安全でない NTLM/SMB の使用を監査、強化、およびハントし、CVE-2025-50154 などのリスクを軽減します。 CVE-2025-50154 の概要 重要度: 高 種類: NTLM 資格情報漏洩＋パッチバイパス ゼロクリック 影響を受けるシステム: Windows 10/11、Windows Server 要約: CVE-2025-50154 は、Microsoft が以前に公開した CVE-2025-24054...

Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free i...

EUVD-2026-92094

A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...

CVE-2026-105148 SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery

A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...

CVE-2026-105148 SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery

A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...

CVE-2026-105148

A server-side request forgery (SSRF) vulnerability exists in SciPhi-AI R2R versions up to 3.6.6 . The flaw is located in the Retrieval Completion API Endpoint within the file py/shared/abstractions/llm.py. Specifically, manipulation of the generation_config.api_base argument allows for remote exe...

CVE-2026-105145

A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function getenvironment of the file goldenverba/components/util.py of the component generatestream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attack...

CVE-2026-16723

CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...

Pixel-Flood-Attack

Pixel Flood DoS - CVE-2024-22393 PoC 웹 서버용 Pixel Flood 취약점 취약한 Apache Answer 버전을 실행하는 웹 애플리케이션에서 Pixel Flood 메모리 고갈 취약점을 테스트하기 위한 경량 개념 증명PoC입니다. 목차 설명 기술 세부사항 영향 받는 버전 요구사항 사용법 PoC 단계 탐지 완화 버그 바운티 팁 참고 자료 면책 조항 설명 이 저장소는 Apache Answer버전 1.2.1까지의 심각한 취약점인 CVE-2024-22393 에 대한 개념 증명PoC을 포함합니다. 이 취약...

llm-guard

!WARNING このプロジェクトはアーカイブされました。 このプロジェクトおよび Hugging Face 上の関連モデルは、もはや積極的な開発やメンテナンスは行われていません。 LLM Guard - LLMインタラクションのためのセキュリティツールキット Protect AI による LLM Guard は、大規模言語モデル（LLM）のセキュリティを強化するために設計された包括的なツールです。 ドキュメント | プレイグラウンド | チェンジログ LLM Guardとは？...

wp2shell

wp2shell WordPress REST APIのルート混乱 （CVE-2026-63030）と、バッチエンドポイントのSQLインジェクション （CVE-2026-60137）を悪用して、リモートコード実行（RCE）を達成します。 脆弱性 ルート混乱 CVE-2026-63030 WordPress REST...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 — React Server Components RCE A Proof-of-Conce...

CVE-2026-105145 Weaviate Verba generate_stream Endpoint util.py get_environment information disclosure

A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function getenvironment of the file goldenverba/components/util.py of the component generatestream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attack...

EUVD-2026-92090

A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function getenvironment of the file goldenverba/components/util.py of the component generatestream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attack...

CVE-2026-105145 Weaviate Verba generate_stream Endpoint util.py get_environment information disclosure

A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function getenvironment of the file goldenverba/components/util.py of the component generatestream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attack...