CVE-2026-72580

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directl...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 – MCPJam Inspector Unauthenticated RCE PoC...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744-PoC Disclaimer: This proof-of-concept...

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code VS Code extension named Solidity Pro "solidity-pro" that has been observed delivering a browser wallet and credential stealer. The names of the extensions are below - helper-beeps.solidity-pro web3devtoolsx.solidity-p...

OpenSMTPD - MAIL FROM Command Injection Detection (CVE-2020-7247)

Detects OpenSMTPD CVE-2020-7247 by sending a crafted MAIL FROM address containing shell metacharacters MAIL FROM: and checking whether the server accepts it with a 250 Ok response. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSMTPD MAIL FROM command injection CVE-2020-7247.""" import secrets...

deepslop

DEEPSLOP — PS5 WebKit Exploit Kit 13.60 / WebKit RCE كيت اس...

PT-2026-69905

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description An issue exists in the local branch of the '/docker-container-terminal' endpoint within the docker-container-terminal.ts file. While the system uses validateRequest for authentication, it fails to...

PT-2026-69852

Name of the Vulnerable Software and Affected Versions OpenCart version 4.2.0.0 Description The extension installer fails to validate that extracted paths from uploaded .ocmod.zip files remain within the intended directory. This allows an attacker to use directory traversal sequences, such as ../,...

CVE-2026-72913: Improper Neutralization of Special Elements used in a Command

Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...

PT-2026-69924

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.8 Description The getRegistryCommands function in packages/server/src/utils/cluster/upload.ts fails to escape the registry.password and registry.registryUrl variables when interpolating them into a shell command...

PT-2026-69886

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description The createCommand function constructs shell commands by interpolating compose service names and configuration into bash command strings. If a compose file with a maliciously crafted name or service...

PT-2026-69922

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description An authenticated user with application create or update permissions can execute arbitrary commands on the local build host or a remote SSH build target. This occurs because the dockerImage field is...

CVE-2026-72863: Improper Privilege Management

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy's WebSocket handlers in-app terminals and log streamers authenticate the session but never authorize it. They establish who the user is via validateRequest and then proceed without consulting the role/permissio...

PT-2026-69880

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description In the writeTraefikConfigRemote function within packages/server/src/utils/traefik/application.ts, user-controlled Traefik configuration is serialized using yaml.stringify and then interpolated into...

PT-2026-69904

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description WebSocket handlers used for in-app terminals and log streamers authenticate sessions using the validateRequest function but fail to perform authorization. Because they do not consult the role and...

PT-2026-69936

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.28.9 Description Dokploy is a free, self-hostable Platform as a Service PaaS. An authenticated user with permissions to create or update file mounts for a service can inject shell metacharacters into the filePath...

PT-2026-69327

Name of the Vulnerable Software and Affected Versions saithink/saigroup SaiAdmin versions prior to 5.0.2 Description A flaw in the Plugin Upload Endpoint allows for unrestricted file upload. This issue occurs within the shell exec function located in the /app/saipackage/install/upload file,...

PT-2026-69909

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy is a self-hostable Platform as a Service PaaS. A shell injection flaw exists in the apps/dokploy/server/api/routers/destination.ts file where the destination.testConnection mutation...

CVE-2026-72864: Missing Authorization

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the local branch of /docker-container-terminal in apps/dokploy/server/wss/docker-container-terminal.ts authenticates with validateRequest but does not authorize the attacker-controlled containerId against the caller's...

CVE-2026-72877: Improper Neutralization of Special Elements used in an OS Command

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the dockerImage field is interpolated without quoting into shell commands in buildRemoteDocker in packages/server/src/utils/providers/docker.ts and is validated only as an optional string. An authenticated user with...