347844 matches found
Security Bulletin: Vault PKI ACME Issues Certificate With Unvalidated SANs
Summary Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverified identity claims, potentially enabli...
CVE-2026-105818
Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverified identity claims, potentially enabling...
cve-2021-41773-exploration
Resumen CVE-2021-41773 es una vulnerabilidad de path traversal descubierta en Apache HTTP Server 2.4.49 en octubre de 2021. La causa raíz fue una falla en la normalización adecuada de las secuencias de puntos terminadas en la URL antes de verificar si la ruta solicitada permanecía dentro de la ra...
CVE-2026-105818 Vault PKI ACME Issues Certificate With Unvalidated SANs
Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverified identity claims, potentially enabling...
Vault PKI ACME Default Directory Policy May Issue Certificates With Unverified Identities
Summary Vault’s PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverified identity claims, potentially enabli...
CVE-2026-76286
In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface API tool to the URL configured for that tool. If another user controls that URL, they could capture the token and use it t...
GHSA-G2V6-RQMX-R4W6 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips, nextcloud-server, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...
GHSA-PQG4-J6R4-53MV vulnerabilities
Vulnerabilities for packages: renovate, code-server...
CVE-2026-102422 vulnerabilities
Vulnerabilities for packages: renovate, code-server...
GHSA-VC2V-76PW-4V95 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, code-server, serve, thingsboard, vitess...
CVE-2026-87776 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, code-server, serve, thingsboard, vitess...
CVE-2026-76286 Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server
In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface API tool to the URL configured for that tool. If another user controls that URL, they could capture the token and use it t...
EUVD-2026-94587
In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface API tool to the URL configured for that tool. If another user controls that URL, they could capture the token and use it t...
CVE-2026-76286
The Splunk MCP Server is vulnerable to a Server-Side Request Forgery (SSRF) in versions below 1.2.1 . A user with the mcp_tool_execute capability can be induced to run a custom API tool configured by another user. This flaw allows the server to send the executing user's Splunk platform authentica...
it355-lab4-enterprise-lan-security
IT355 Laboratorio 4: Seguridad de LAN Empresarial y Análisis de Shellshock 📌 Resumen del Proyecto Este repositorio contiene una evaluación de seguridad integral de un entorno de LAN empresarial. El enfoque principal de este proyecto fue la identificación, explotación y remediación de la...
GHSA-W794-RJ3P-XV45 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Summary Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to reach the MCP server settings "Settings → MCP Servers → Add MCP Server",...
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Summary Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to reach the MCP server settings "Settings → MCP Servers → Add MCP Server",...
NPM: Ghost: Server-Side Request Forgery in Bookmark Fetching
NPM: Ghost: Server-Side Request Forgery in Bookmark Fetching vulnerability discovered by ? in WordPress Npm ghost versions = 6.54.1, 6.65.0...
GHSA-39W2-RJM5-CHCV Next.js has information disclosure in development server's Model Context Protocol endpoint
The Next.js development server next dev exposes a Model Context Protocol endpoint that does not verify which website a request originates from, allowing a malicious website visited by the developer to read sensitive development data — including the project's location on disk, source code snippets...