CVE-2026-12542 Foreman: command injection in foreman-tail

A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not...

CVE-2026-12542

A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not...

windows-smb-vulnerability-framework-cve-2025-33073

Каркас исследования уязвимостей Windows SMB Client Автор: cyberseallll Создано: 2025 Обзор Я разработал этот исследовательский каркас для анализа и понимания CVE-2025-33073 — критической уязвимости повышения привилегий в Windows SMB Client. Данная реализация предоставляет комплексные инструменты...

CVE-2026-26717

CVE-2026-26717: HMAC-атака по времени в OpenFUN Richie LMS Автор: Elvin Latifli CVE ID: CVE-2026-26717 Серьёзность: Средняя CVSS 3.1: 4.8 — AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Затронутый продукт: OpenFUN Richie все версии до коммита a1b5bbd Затронутый компонент: src/richie/apps/courses/api.py —...

firewall-cve

firewall-cve Уязвимость обхода функции безопасности правил брандмауэра Windows AppContainer CVE-2021-41338 Дата выпуска: 12 октября 2021 г. Назначенный CNA: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 Вектор атаки Локальный Сложность атаки Низкая Требуемые привилегии Низкие Взаимодействие с...

redsun-bluehammer-undefend-detection-pack

Пакет обнаружения RedSun, BlueHammer, UnDefend и CrossFamily ВАЖНО: Весь код и логика обнаружения в этом репозитории созданы искусственным интеллектом. Нет никаких гарантий, что эти скрипты корректны, полны, безопасны или подходят для любого окружения. Используйте эти скрипты полностью на свой...

CVE-2026-23010-CCSDS-Telecommand-Replay-Without-Sequence-Number

CVE-2026-23010 – Воспроизведение телекоманды CCSDS без номера последовательности Код программы симулятор спутника на Python satellitesim.py - Spacecraft that executes telecommands without checking sequence number class Satellite: def initself: self.executed = set def receivetcself, cmdid, seqnum:...

Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)

SummaryA timing side-channel vulnerability exists in the PKCE RFC 7636 implementation of the Authorization Code Grant flow. The codechallengemethodplain function uses Python's standard == operator for string comparison instead of a constant-time comparison function, potentially allowing...

lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function

SummaryWhen plaintext passwords are stored in AUTHACCOUNTS, the comparison uses Python's == operator which is not constant-time. An attacker with low-latency access can exploit timing differences to recover the password character by character. Detailspython lightrag/api/passwords.py:13-26def...

MCP Atlassian: Insecure File Permissions on OAuth Token Storage

SummaryThe OAuth token fallback file storage in OAuthConfig.savetokenstofile creates token files containing access tokens, refresh tokens, and cloud IDs with default filesystem permissions typically 0644 on Linux, world-readable. Any local user on a shared system can read these files to obtain fu...

LiteLLM: MCP Proxy Has Improper Authentication

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...

BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function loadopenapispecasync of the file litellm/proxy/experimental/mcpserver/openapitomcpgenerator.py of the component MCP OpenAPI Spec Loader. This manipulation of the argument specpath causes...

BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function uiviewusers of the file litellm/proxy/managementendpoints/internaluserendpoints.py of the component Incomplete Fix CVE-2025-0628. Such manipulation leads to improper authorization. I...

LiteLLM: M2M JWT Handler Has Improper Authorization

A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file litellm/proxy/auth/userapikeyauth.py of the component M2M JWT Handler. Such manipulation leads to improper authorization. The attack can be launched remotely. A high complexity level is...

Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper

SummaryUsing torch.jit.unsupportedtensorops.execWrapper function, which is a pytorch library function to execute remote pickle file. DetailsThe attack payload executes in the following steps:First, the attacker craft the payload by calling to torch.jit.unsupportedtensorops.execWrapper function in...

Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions

SummaryUsing idlelib.autocomplete.AutoComplete.fetchcompletions, which is a built-in python library function to execute remote pickle file. DetailsThe attack payload executes in the following steps:First, the attacker craft the payload by calling to...

CVE-2021-46702

CVE-2021-46702 Описание: Tor Browser 9.0.7 на Windows 10 сборки 10586 подвержен утечке информации. Это может позволить локальным злоумышленникам обойти предусмотренную функцию анонимности и получить информацию о луковых сервисах, посещённых локальным пользователем. Это можно сделать путём анализа...

CVE-2026-25050

CVE-2026-25050 – Атака по времени аутентификации Этот репозиторий содержит Proof of Concept, демонстрирующий атаку по времени, затрагивающую метод NativeAuthenticationStrategy.authenticate. Данный PoC предоставлен в качестве технической демонстрации для блога / исследовательских целей. Уязвимость...

CVE-2026-92870

A flaw was found in Pgpool-II. Due to a stack-based buffer overflow, an unauthenticated remote attacker can trigger abnormal process termination by sending specially crafted input to the server. This issue leads to a Denial of Service DoS, making the service unavailable to legitimate users...

CVE-2026-86344

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed...