CVE-2026-107206 LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

CVE-2026-107206 LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 federated server and IBM Db2 shipped with IBM WebSphere Remote Server

Summary IBM Db2 federated server and IBM Db2 are shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM Db2 federated server and IBM Db2 has been published in a security bulletin CVE-2026-41586, CVE-2026-16702, CVE-2026-10649, CVE-2026-17463,...

r2s

R2S - Сканер React2Shell Веб-сканер уязвимости для CVE-2025-55182 — критической уязвимости удалённого выполнения кода RCE в React Server Components. Живой сканер: https://r2s.mxm0z.com О CVE-2025-55182 CVE-2025-55182 — это критическая CVSS 10.0 уязвимость в протоколе Flight компонентов React...

verify-ghsa-c4j6-fc7j-m34r

verify-ghsa-c4j6-fc7j-m34r Vérificateur intégré pour GHSA-c4j6-fc7j-m34r / CVE-2026-44578 — Falsification de requête côté serveur SSRF dans Next.js via les demandes de mise à niveau WebSocket. ⚠️ Réservé aux tests de sécurité autorisés. Vous êtes responsable de vous assurer que vous avez la...

react-CVE-2025-55182-fixer

أتمتة طلبات السحب PRs لأمان مكونات خادم React يوفر هذا المستودع سكريبتًا لزيادة الإصدارات تلقائيًا وإنشاء طلبات سحب PRs للمستودعات المتأثرة بـCVE-2025-55182، والتي تؤثر على الإصدارات الضعيفة من حزم react-server-dom- وحزم React ذات الصلة. ما الذي تفعله هذه الأداة؟ تفحص الإصدارات المتأثرة من...

CVE-2025-55182

CVE-2025-55182 POC Ce dépôt contient une preuve de concept POC pour CVE-2025-55182, démontrant la vulnérabilité et son exploitation. Serveur vulnérable "dependencies": "next": "16.0.6", "react": "19.2.0", "react-dom": "19.2.0" , Serveur vulnérable 2 "dependencies": "next": "^15.0.0", "react":...

Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update

An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 7.0.2 release and security update

Red Hat JBoss Web Server 7.0.2 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives ...

GHSA-M62C-5Q34-F3CF Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token

Summary Actual Sync Server's CORS proxy is intended to let authenticated users fetch resources only from repositories listed in the official plugin allowlist. When ACTUALGITHUBTOKEN is configured, the proxy automatically attaches the server's GitHub token to GitHub requests. The GitHub API...

EUVD-2026-87369

Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token...

Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token

Summary Actual Sync Server's CORS proxy is intended to let authenticated users fetch resources only from repositories listed in the official plugin allowlist. When ACTUALGITHUBTOKEN is configured, the proxy automatically attaches the server's GitHub token to GitHub requests. The GitHub API...

CVE-2024-37081

CVE-2024-37081 : Multiples escalations de privilèges locaux dans VMware vCenter Server Le vCenter Server contient plusieurs vulnérabilités d'escalade de privilèges locaux dues à une mauvaise configuration de sudo. Un utilisateur local authentifié disposant de privilèges non administratifs peut...

File-Tunnel

File Tunnel Tunnélisez des connexions TCP via un serveur de fichiers. Une liste complète des systèmes de fichiers pris en charge est disponible ici. Téléchargement Des exécutables portables pour Windows, Linux et Mac sont disponibles dans la section releases. Exemple 1 - Contourner un pare-feu Vo...

EUVD-2026-94330

llama.cpp before b11393 contains a use-after-free and double free vulnerability in commonchatpegmapper::map that allows unauthenticated remote attackers to corrupt heap memory via a dangling currenttool pointer. Attackers can submit a chatparser in a POST /completion request emitting a tool-id...

CVE-2026-107183

llama.cpp before b11393 contains a use-after-free and double free vulnerability in commonchatpegmapper::map that allows unauthenticated remote attackers to corrupt heap memory via a dangling currenttool pointer. Attackers can submit a chatparser in a POST /completion request emitting a tool-id...

CVE-2026-107183 llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parser

llama.cpp before b11393 contains a use-after-free and double free vulnerability in commonchatpegmapper::map that allows unauthenticated remote attackers to corrupt heap memory via a dangling currenttool pointer. Attackers can submit a chatparser in a POST /completion request emitting a tool-id...

CVE-2021-41773

خادم Apache HTTP 2.4.49 - تجاوز المسار وتنفيذ الأوامر عن بُعد CVE-2021-41773 أداة إثبات مفهوم متطورة مبنية بلغة بايثون لاستغلال CVE-2021-41773. تقوم هذه الأداة بأتمتة عملية اختبار خوادم Apache 2.4.49 بحثًا عن ثغرات تجاوز المسار وتنفيذ الأوامر عن بُعد RCE. ⚠️ إخلاء مسؤولية قانوني هذه الأداة لأغراض...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 7.0.2 release and security update

Red Hat JBoss Web Server 7.0.2 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

CVE-2022-22965

spring4shell ⭐ реализация CVE-2022-22965 на Python, предоставляющая пользователю подсказку в стиле SSH-сессии. Скрипт разработан так, чтобы быть простым для понимания и выполнения, с учётом читаемости и доступности — в зависимости от выбора пользователя. Предназначен для эксплуатации уязвимости н...