Project-CVE-2026-33017

CVE-2026-33017 Langflow Script — Code Explanation coded by: Xer0TLabs x Persephrak Decentralized Syndicate Purpose of this document This document is a high-level explanation of the supplied Python program for review, incident-response, and defensive analysis. It intentionally does not include...

readable-thrift

Readable Thrift Readable Thrift makes binary Thrift protocol messages easy to work with by converting them to and from a human-friendly format. This makes manual analysis of and tampering with binary format Thrift messages just as easy as working with plaintext protocols like HTTP. The library is...

CVE-2025-52688

CVE-2025-52688 Affected Products Alcatel AP13161 - Enterprise WIFI access point Summary There are 2 main vulnerabilities being addressed here: Lack of input sanization on multiple JSON web parameters that allows malicious characters such as ; to be injected to caused a command injection attack La...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...

CLEANSTART-2026-LJ51082 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

Security vulnerability affects the druid-fips package. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON...

ShredHound

ShredHound Overview Split a large BloodHound JSON file into a bunch of smaller files for faster importing. Follow me on Twitter Mike Felch - @ustayready Basic Usage usage: shred.py -h --output OUTPUT --filename FILENAME --chunks CHUNKS optional arguments: -h, --help show this help message and exi...

CVE-2026-120194

A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service...

DEBIAN-CVE-2026-120194

A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service...

CVE-2026-120194

A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service...

CVE-2026-120194

A flaw exists in json-glib where the JSONPath slice evaluator used by json_path_query() can enter an infinite loop when processing a slice expression with a negative step . An attacker who can provide controlled JSONPath expressions to an application can trigger this loop, causing the application...

CVE-2026-120194 Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step

A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service...

EUVD-2026-114712

A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service...

CVE-2026-120194 Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step

A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service...

CVE-2026-120194

A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service...

idalib-cli

️ idalib-cli Agent-native CLI for the IDA Pro IDALib — every command takes one -d/--db flag, every answer is JSON. English · 中文 ✨ Features 🗄️ Stateless — pass -d/--db a binary or an .i64; no daemon, no session bookkeeping. 💾 Persistent IDB state — the IDB file is the state: comments, bookmarks,...

CVE-2025-59057-PoC

A XSS vulnerability exists in in React Router's meta/ APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag...

CVE-2026-109367

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic Schema, Local SEO, Sitemap & SEO Insights plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.0.3 via the 's' parameter. This makes it possible for unauthenticated attackers...

CVE-2026-103915

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.12 via the 'page' parameter. This makes it possible for unauthenticated attackers to extract staff personally identifiable...

AhsayCBS-Auth-Bypass-RCE

AhsayCBS Authentication Bypass & RCE CVE-2026-105133 + CVE-2026-105134 — Unauthenticated remote code execution in AhsayCBS ≤10.3.4 Blog Post Technical analysis covering root cause, exploitation, and indicators of compromise is available on the Horizon3.ai attack research blog:...

CVE-2026-109367 All in One SEO <= 5.0.3 - Unauthenticated Sensitive Information Disclosure in 's' Search Query Parameter

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic Schema, Local SEO, Sitemap & SEO Insights plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.0.3 via the 's' parameter. This makes it possible for unauthenticated attackers...