Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty

Summary There are multiple vulnerabilities in Java, JavaScript and IBM WebSphere Application Server Liberty used by IBM Application Modernization Accelerator. Vulnerability Details CVEID:CVE-2026-14981 DESCRIPTION: IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty ar...

Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

Summary One unauthenticated request with a crafted User-Agent stalls a Quasar SSR server for seconds. Quasar auto-installs its Platform plugin on every server-side render, and Platform.parseSSR feeds the raw, unbounded User-Agent request header into a chain of backtracking regular expressions in...

NPM: Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

NPM: Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server vulnerability discovered by ? in WordPress Npm quasar versions = 2.23.2...

EUVD-2026-94521

PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile val...

CVE-2021-4773

CVE-2021-4773 이것은 가상 머신을 사용하여 취약점 CVE-2021-4773을 익스플로잇하는 방법에 대한 연습 예제입니다. 이 튜토리얼을 위해 필요한 것 Kali Linux 가상 머신 Ubuntu Server 가상 머신 Apache 버전 2.4.49 설치 자, 시작해봅시다. 두 대의 가상 머신이 실행 중인 상태에서 아카이브 저장소를 사용하여 Apache 버전 2.4.49를 설치할 것입니다. 해당 버전은 여기에서 찾을 수 있습니다. https://archive.apache.org/dist/httpd/CHANGES2.4....

CVE-2026-107272

Gophish versions through 0.12.1 are vulnerable to stored and reflected cross-site scripting (XSS) due to unescaped SMTP server error messages . An attacker who controls or intercepts a sending profile's SMTP server can inject malicious scripts. These scripts execute when administrators view campa...

CVE-2026-107272 Gophish through 0.12.1 XSS via Unescaped SMTP Server Error Messages

Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view...

EUVD-2026-94403

Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view...

CVE-2026-107272 Gophish through 0.12.1 XSS via Unescaped SMTP Server Error Messages

Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view...

CVE-2026-49009

▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██ ██ ▄█▀▀█▄ ▄██▄ ▄██▄ ▄█▀▀█▄ ██ ██▄▄██ ██▄▄ ▄▄▄ ▄██▀ ██ ██ ▄██▀ ██▄▄▄ ▄▄▄ ▀█████ ▀▀▀██ ██ ██ ██ ██ ▀▀▀██ ▀█████ ▀██▀ ██▄▄▄▄ ███▄▄ ▀██▀ ███▄▄ ▀█▄▄█▀ ██ ▄▄██▀ ▀██▀ ▀██▀ ▄▄██▀ ░█▄█░█▀▀░█▀█░█▀▄░█▀▀░█▀▄░░░█▀▀░█▀▀░█▀▄░█░█░█▀▀░█▀▄░░░█▀▄░█▀▀░█▀▀░...

CVE-2025-67223

CVE-2025-67223: Aranda Service Desk의 잘못된 접근 제어 및 정보 공개 CVE ID: CVE-2025-67223 영향받는 제품: Aranda Service Desk Aranda File Server - AFS 모듈 영향받는 버전: 8.3.12 작성자: Brandon Perez Lara 🚨 개요 Aranda Service Desk의 파일 관리 모듈Aranda File Server에서 심각한 취약점이 확인되었습니다. 이 시스템은 예측 가능한 이름예: YYYYMMDD.log의 일일 활동 로그를 접근 제한 ...

CVE-2026-106574 ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...

CVE-2026-106574

The ImageMagick software is vulnerable to a heap buffer overwrite in its distributed pixel cache server. A client connected to the server can provide crafted pixel data that triggers an integer-size calculation error , leading to a crash of the server. This vulnerability affects versions prior to...

EUVD-2026-94393

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...

CVE-2026-106574 ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...

Security Bulletin: IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server execution (CVE-2026-9764)

Summary IBM Bob could allow a remote attacker to execute arbitrary code when a user opens an untrusted repository in Bob Shell. Due to insufficient validation of workspace-provided MCP server configurations, MCP servers defined within the repository could be automatically executed without explici...

CVE-2026-106570

The ImageMagick image manipulation software is vulnerable to a Denial of Service (DoS) condition in its distributed pixel cache server . An unauthenticated client on an adjacent network can exhaust the server's available connections by repeatedly connecting to it. This issue is characterized by u...

EUVD-2026-94389

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...

CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...

CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...