Exploit for Improper Input Validation in Nodeca Js-Yaml

Doceker bulid 취약환경으로 Docker 환경으로 빌드를 한다. docker build -f c...

overflow_exploit_framework

kernel-research — Framework CVE overflow Usage éducatif uni...

PT-2026-48711

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, the repository has a privileged deploy workflow that runs after the unprivileged build workflow completes. The build workflow runs on pull requests, and the deploy workflow checks ou...

PT-2026-48713

In Duck Site before version 1.0.1, the repository has a deploy workflow that runs after the build workflow completes. The build workflow runs on pull requests, while the deploy workflow runs with package-write permissions and deployment secrets. If an attacker can make a pull request build satisf...

GHSA-5G86-85RP-F9HX Papra HTTP redirect bypass can lead to SSRF via webhook delivery system

Summary Papra's webhook delivery system contains an SSRF protection bypass that allows any authenticated organisation member to cause the server to make HTTP requests to internal addresses — loopback, link-local, and RFC-1918 ranges. The SSRF protection validates the registered webhook URL but...

CVE-2026-11859 HTML injection in the Canarytoken links email

An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting XSS in emails clients that render HTML emails. This issue affects Canarytokens: from Docker tag sha-c0f3cf142 before sha-08c3f93d, from G...

cve-research

CVE Research Personal repository for CVE analysis, proof-of-c...

CVE-2026-39833 affecting package docker-compose for versions less than 2.27.0-13

CVE-2026-39833 affecting package docker-compose for versions less than 2.27.0-13. A patched version of the package is available...

CVE-2026-25680 affecting package docker-buildx for versions less than 0.14.0-15

CVE-2026-25680 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...

CVE-2026-39827 affecting package docker-buildx for versions less than 0.14.0-15

CVE-2026-39827 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...

CVE-2026-39835 affecting package docker-buildx for versions less than 0.14.0-15

CVE-2026-39835 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...

CVE-2026-56852 affecting package docker-compose for versions less than 2.27.0-13

CVE-2026-56852 affecting package docker-compose for versions less than 2.27.0-13. A patched version of the package is available...

CVE-2026-46598 affecting package docker-compose for versions less than 2.27.0-13

CVE-2026-46598 affecting package docker-compose for versions less than 2.27.0-13. A patched version of the package is available...

CVE-2026-39833 affecting package docker-buildx for versions less than 0.14.0-15

CVE-2026-39833 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...

CVE-2026-46598 affecting package docker-buildx for versions less than 0.14.0-15

CVE-2026-46598 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...

CVE-2026-42502 affecting package docker-buildx for versions less than 0.14.0-15

CVE-2026-42502 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...

CVE-2026-39835 affecting package docker-compose for versions less than 2.27.0-13

CVE-2026-39835 affecting package docker-compose for versions less than 2.27.0-13. A patched version of the package is available...

CVE-2026-25681 affecting package docker-compose for versions less than 2.27.0-13

CVE-2026-25681 affecting package docker-compose for versions less than 2.27.0-13. A patched version of the package is available...

CVE-2026-42502 affecting package docker-compose for versions less than 2.27.0-13

CVE-2026-42502 affecting package docker-compose for versions less than 2.27.0-13. A patched version of the package is available...

CVE-2026-25681 affecting package docker-buildx for versions less than 0.14.0-15

CVE-2026-25681 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...