CVE-2026-108523 Studio-Saelix Sencho git-sources Browse API Endpoint outboundTarget.ts server-side request forgery

A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be...

CVE-2026-108523

The Studio-Saelix Sencho software (up to version 0.94.1 ) contains a Server-Side Request Forgery (SSRF) vulnerability in the git-sources Browse API Endpoint component, specifically affecting the outboundTarget.ts file. Manipulation of the repo_url argument can trigger the SSRF, which may be execu...

shortscan

🌀 Shortscan Una herramienta de enumeración de nombres cortos de archivos en IIS. Funcionalidad Shortscan está diseñado para determinar rápidamente qué archivos con nombres cortos existen en un servidor web IIS. Una vez identificado un nombre corto, la herramienta intentará identificar...

mssqlproxy

mssqlproxy mssqlproxy es un kit de herramientas diseñado para realizar movimiento lateral en entornos restringidos a través de un Microsoft SQL Server comprometido mediante reutilización de sockets. El cliente requiere impacket y privilegios sysadmin en el servidor SQL. Por favor, lea este artícu...

ranger

ranger Una herramienta para ayudar a los profesionales de seguridad a acceder e interactuar con sistemas remotos basados en Microsoft Windows. Este proyecto fue conceptualizado con el pensamiento de que no inventamos el arco ni la flecha, solo una forma más eficiente de usarlos. Ranger es una...

CVE-2026-108521

A server-side request forgery (SSRF) vulnerability exists in Studio-Saelix Sencho up to version 0.97.1 . The flaw is located in the isValidRemoteUrl function within the backend/src/utils/validation.ts file of the Add Remote Node API Endpoint component. An authenticated user with node-management p...

CVE-2026-108521 Studio-Saelix Sencho Add Remote Node API Endpoint validation.ts isValidRemoteUrl server-side request forgery

A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be execute...

CVE-2026-108688

Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission. Attackers can send POST requests with image-named files to /api/localStorage/pictures to writ...

Microsoft SharePoint Server - Authentication Bypass (ToolShell)

Microsoft Office SharePoint Server contains an improper authentication vulnerability that allows unauthorized attackers to perform spoofing over a network. By crafting a POST request to /layouts/15/ToolPane.aspx with a forged Referer header /layouts/SignOut.aspx, attackers can bypass authenticati...

CVE-2026-108688

Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission. Attackers can send POST requests with image-named files to /api/localStorage/pictures to writ...

EUVD-2026-96713

Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission. Attackers can send POST requests with image-named files to /api/localStorage/pictures to writ...

CVE-2026-108688 Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload

Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission. Attackers can send POST requests with image-named files to /api/localStorage/pictures to writ...

CVE-2026-108688 Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload

Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission. Attackers can send POST requests with image-named files to /api/localStorage/pictures to writ...

CVE-2026-108688

Eladmin versions through 2.7 are vulnerable to a missing authorization flaw in the LocalStorageController uploadPicture handler. This allows low-privileged authenticated users to bypass the storage:add permission. By sending POST requests with image-named files to /api/localStorage/pictures, an a...

CLEANSTART-2026-FI20100 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request

Security vulnerability affects the kube-logging-operator package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...

EUVD-2026-96610

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out. Attackers can obtain record ids from the unguarded /airag/app/queryById endpoint and retrieve MCP...

PT-2026-110104

Name of the Vulnerable Software and Affected Versions Casdoor versions prior to 4.11.0 Description A remote server-side request forgery exists in the Proxy Validation component. The issue occurs within the CasP3ProxyValidate function located in the controllers/cas.go file, where manipulation of t...

PT-2026-110170

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.11 Description An authorization flaw exists in the MCP server faq search tool. This occurs because the searchDatabase function fails to apply user or group permission checks. Consequently, clients connected to th...

CVE-2026-108760: Binding to an Unrestricted IP Address

LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides. Network-adjacent attackers can call the project and dataset management API to read stored provider API key...

PT-2026-110121

Name of the Vulnerable Software and Affected Versions Rill versions 0.77.0 through 0.90.5 Description The admin OAuth server fails to properly authorize requests, allowing the issuance of authorization codes to dynamically registered clients without requiring user consent. An attacker can registe...