Important: containernetworking-plugins security update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...

ALSA-2026:70391 Important: containernetworking-plugins security update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...

SSRF-Exploit-CVE-2024-27564

SSRF-Exploit-CVE-2024-27564 Título del Proyecto Este proyecto demuestra una vulnerabilidad de Server-Side Request Forgery SSRF en el archivo pictureproxy.php. Descripción Una vulnerabilidad en pictureproxy.php permite a atacantes remotos realizar solicitudes arbitrarias inyectando URLs en el...

CVE-2026-20841

🛡️ CVE-2026-20841 - Windows Notepad Security Test Tool ⚠️ What is CVE-2026-20841? CVE-2026-20841 is a known security weakness in the Windows Notepad application. It affects the markdown feature, which lets Notepad display formatted text with clickable links. This weakness happens because the...

ms15-034-Scan

ms15-034-scan python3 Batch scan for ms15-034/CVE-2015-1635 vulnerability Usage root@kitploit: python3 ms-socket.py url.txt Add assets to url.txt yourself Output to result.txt Did not remove http:// and https:// Replace manually in notepad using ctrl+h...

CVE-2025-31486

CVE-2025-31486-PoC.py url image Para más detalles sobre la reproducción de la vulnerabilidad y la configuración específica del entorno, consulte：https://chenchena.blog.csdn.net/article/details/147150357?spm=1001.2014.3001.5502...

CVE-2024-4577

Coloque los archivos a escanear en urls.txt y luego ejecute directamente POC.py Ejecute comandos con EXP.py...

CVE-2026-73551

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...

CVE-2026-46650 Joplin: Stored XSS in public share viewer via javascript: URL bypass in isAcceptedUrl

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, isAcceptedUrl in packages/renderer/htmlUtils.ts uses an unanchored regular expression for internal resource URLs, allowing a javascript: URL containing a matching 32-character...

CVE-2026-46650

Joplin (open-source note-taking app) prior to 3.7.2 contains a stored XSS in the public share viewer. The root cause is an unanchored regular expression in isAcceptedUrl() (packages/renderer/htmlUtils.ts) that allows a javascript: URL containing a matching 32-character path fragment to pass valid...

CVE-2026-59816

Joplin Server (prior to 3.7.7 ) is vulnerable to a path traversal in its transcription proxy endpoints. When TRANSCRIBE_ENABLED=true, the GET and POST /api/transcribe/:id handlers pass the decoded job ID directly into backend URLs. An authenticated user can inject URL-encoded slash and parent-dir...

CVE-2026-59816 Joplin: Path traversal in transcribe proxy endpoint via URL-encoded slash

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, the GET /api/transcribe/:id and POST /api/transcribe/:id handlers in packages/server/src/routes/api/transcribe.ts on Joplin Server instances with TRANSCRIBEENABLED=true pass t...

CVE-2026-49449 Joplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. From 1.4.0 until 3.7.2, packages/renderer/MdToHtml/rules/katex.ts enables KaTeX's trust option for note content, allowing a note author to place a \href URL into rendered output without passi...

CVE-2026-49449 Joplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. From 1.4.0 until 3.7.2, packages/renderer/MdToHtml/rules/katex.ts enables KaTeX's trust option for note content, allowing a note author to place a \href URL into rendered output without passi...

EUVD-2026-84168

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. From 1.4.0 until 3.7.2, packages/renderer/MdToHtml/rules/katex.ts enables KaTeX's trust option for note content, allowing a note author to place a \href URL into rendered output without passi...

CVE-2025-60876

CVE-2025-60876: busybox wget request-target injection fix A behavior-preserving fix for CVE-2025-60876, an HTTP header-injection vulnerability in BusyBox wget, plus the proof-of-concept that demonstrates it and the artifacts for submitting the fix upstream to BusyBox. The vulnerability BusyBox wg...

CVE-2026-51385

CVE-2026-51385 Aviso para CVE-2026-51385. Necesario publicarlo ya que GRAPHIFY no ha reconocido el aviso ni lo ha publicado, y MITRE asignó CVE-2026-51385, este es el aviso correspondiente. ES: Este fue mi primer cve, para ser honesto encontre una manera de romper la logica en la funcion ANTI SSR...

EUVD-2026-84119

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...

CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC

CVE-2024-38475SonicBoomApacheURLTraversalPoC Autor: abrewer251 Una herramienta de prueba de concepto para probar la vulnerabilidad de traversal de URL de Apache CVE-2024-38475 "SonicBoom". Este script automatiza la negociación TLS, el escaneo de directorios, la verificación de traversal y el...

drupal-openai-provider-ssrf-cve-2026-13233

Drupal OpenAI Provider — SSRF / local file read via response URL CVE-2026-13233 Untrusted upstream: the provider that fetched the URL its response told it to. Drupal OpenAI Provider aiprovideropenai · SSRF CWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 Status: Coordinated disclosure complete...