CVE-2026-102264

A cross-site scripting (XSS) vulnerability exists in the Edit Profile Feature of mwasikz robo-cafe-rms (affected up to commit 228c44a02823f04e85db32b7137809a2856148fc). The flaw is located within an unknown function in the frontend/update-account.php file, where manipulating the Name , Address , ...

EUVD-2026-88640

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

CVE-2026-97567

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. A race condition can occur between socket disconnection and packet retransmission timer handling, resulting in an inconsistent socket state. A local user can exploit this timing flaw during active connection teardown to cause a...

chub-supply-chain-poc

PoC de Cadena de Suministro de Context Hub Vulnerabilidad de desinfección cero enContext Hub @aisuite/chub v0.1.3 permite la inyección silenciosa de dependencias a través del pipeline de documentación MCP. Referencias: CWE-94 Inyección de Código | CWE-829 Esfera de Control No Confiable | CWE-345...

CVE-2026-102247

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

CVE-2026-102248

A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might b...

CVE-2026-102249

A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2026-102245

A weakness has been identified in MODSetter SurfSense up to 2.0.3. The affected element is an unknown function of the file surfsensebackend/app/routes/circlebackwebhookroute.py of the component circleback Endpoint. Executing a manipulation can lead to missing authentication. The attack can be...

CVE-2026-102263

A vulnerability exists in mwasikz robo-cafe-rms up to commit 228c44a02823f04e85db32b7137809a2856148fc . An unknown function within the manage-food.php file allows for unrestricted upload , which can be triggered remotely. While the exploit has been disclosed to the public and may be used, specifi...

CVE-2026-102263 mwasikz robo-cafe-rms manage-food.php unrestricted upload

A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

EUVD-2026-88631

A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

Cyber-Defenders-lab-

Laboratorios Blue Team de CyberDefenders Mis informes de los laboratorios Blue Team de CyberDefenders, resueltos con Wireshark. Cada laboratorio es una investigación real de análisis forense de red, que comienza con un archivo PCAP y termina con la reconstrucción completa del ataque. 📄 Informe PD...

whisperpair-poc-tool

WhisperPair-PoC-Tool e Investigación Un análisis profundo de CVE-2025-36911 y las brechas de seguridad en el ecosistema Fast Pair de Google Blog Post Resumen Ejecutivo Google Fast Pair fue diseñado para hacer que el emparejamiento Bluetooth sea fluido: toca una notificación y estás conectado. Per...

CVE-2026-97566

A flaw was found in the Linux kernel. When removing an initial endpoint in the Multipath TCP MPTCP path manager, the system fails to clear pending address announcements, leaving stale entries in memory. A local user can exploit this vulnerability by manipulating MPTCP endpoint configurations, whi...

CVE-2023-31704

CVE-2023-31704 descripción Sourcecodester Online Computer and Laptop Store 1.0 es vulnerable a Control de Acceso Incorrecto, lo que permite a atacantes remotos elevar privilegios al rol de administrador. Tipo de Vulnerabilidad Control de Acceso Incorrecto Vendedor del Producto Sourcecodster Códig...

CVE-2026-84367

A flaw was found in joi. A remote attacker can alter the prototype of an object returned by validation by submitting specially crafted input keys. When an application configures dynamic key renaming based on regular expression patterns, the validator fails to properly restrict sensitive internal...

EUVD-2026-88630

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleoncms/admin/mediacontroller.rb of the component Media Crop Handler. This manipulation of the argument savedavatar causes authorization bypass. The attack may be initiated...

CVE-2026-102261 owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleoncms/admin/mediacontroller.rb of the component Media Crop Handler. This manipulation of the argument savedavatar causes authorization bypass. The attack may be initiated...

CVE-2026-102261

A flaw exists in owen2345 Camaleon CMS up to version 2.9.2 within the Media Crop Handler component. Specifically, the crop function in app/controllers/camaleon_cms/admin/media_controller.rb is vulnerable to an authorization bypass caused by the manipulation of the saved_avatar argument. This vuln...

EUVD-2026-88628

A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to...