CVE-2026-84218

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

CVE-2026-79684

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges...

EUVD-2026-69214

A vulnerability was detected in Releasit Releasit COD Form & Upsells v1. This vulnerability affects unknown code of the component OTP Validation. The manipulation results in client-side enforcement of server-side security. The attack may be launched remotely. The exploit is now public and may be...

CVE-2026-84110

Releasit COD Form & Upsells v1 contains a vulnerability in its OTP Validation component where server-side security is enforced only on the client side, allowing remote attackers to bypass one-time password validation without authentication or user interaction. The vulnerability results in a low i...

CVE-2026-84110 Releasit Releasit COD Form & Upsells OTP Validation client-side enforcement of server-side security

A vulnerability was detected in Releasit Releasit COD Form & Upsells v1. This vulnerability affects unknown code of the component OTP Validation. The manipulation results in client-side enforcement of server-side security. The attack may be launched remotely. The exploit is now public and may be...

CVE-2021-40346

CVE-2021-40346 — تجاوز عدد صحيح في HAProxy يؤدي إلى تهريب طلبات HTTP ملخص الثغرة HAProxy هو برنامج وكيل عكسي وموزّع أحمال مفتوح المصدر، يتولى توزيع الأحمال ومعالجة قواعد التحكم في الوصول ACL وغيرها CVE-2021-40346 هي ثغرة تجاوز قواعد التحكم في الوصول ACL Bypass تنشأ في الدالة htxaddheader التي يخز...

CVE-2026-79686

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges...

CVE-2026-79686

Dell PowerStore contains a Protection Mechanism Failure vulnerability that allows an authenticated user with limited privileges to bypass access restrictions and gain escalated privileges. The Dell-assigned CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicat...

EUVD-2026-69213

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges...

CVE-2026-80047

Hugging Face Transformers (versions 4.49.0 through 5.8.1) contains a consent-bypass flaw in GenerativePreTrainedModel.load_custom_generate() . The function fetches and writes a remote Python module to ~/.cache/huggingface/modules via an unconditional file copy in dynamic_module_utils.py before ev...

EUVD-2026-69144

A vulnerability in Hugging Face Transformers versions = 4.49.0 and = 5.8.1 allows remote Python files to be written to local disk without user consent when using GenerativePreTrainedModel.loadcustomgenerate. The function fetches and caches a remote module file before performing the required...

CVE-2026-79684

Dell PowerStore contains a Protection Mechanism Failure vulnerability (CVE-2026-79684, CVSS 3.1 score 8.8 HIGH ). An authenticated user with limited privileges could bypass access restrictions to gain escalated privileges , with high impact on confidentiality, integrity, and availability over the...

cve-2026-21509-office_security_bypass_reproduction

CVE-2026-21509 — Contournement de la fonctionnalité de sécurité de Microsoft Office CVE-2026-21509 est une vulnérabilité de contournement de la fonctionnalité de sécurité de Microsoft Office CVSS 7.8 , activement exploitée par APT28 hackeurs russes contre l'Ukraine Dépendance à des entrées non...

cve-2025-24472-fortinet_authbypass_reproduction

CVE-2025-24472 — Fortinet FortiOS / FortiProxy Contournement de l'authentification Aperçu CVE-2025-24472 est une vulnérabilité de contournement de l'authentification dans Fortinet FortiOS et FortiProxy. Un attaquant non authentifié peut élaborer des requêtes proxy CSF Central Security Fabric...

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — تجاوز المصادقة في PAN-OS → سلسلة تصعيد الامتيازات CVE| الوصف| CVSS ---|---|--- CVE-2024-0012| تجاوز مصادقة واجهة إدارة PAN-OS| 9.3 CVE-2024-9474| تصعيد الامتيازات في PAN-OS| 6.9 عند الربط بينهما، تسمح هذه الثغرات بتنفيذ تعليمات برمجية عن بعد بدون مصادقة على واجهة...

CVE-2026-84218 Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

EUVD-2026-69129

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

CVE-2026-84218 Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

CVE-2026-84218

CVE-2026-84218 affects Jolokia (org.jolokia/jolokia-core), a JMX-over-HTTP bridge. The flaw is in the JSR-160 proxy functionality, where the JNDI denylist introduced to mitigate CVE-2018-1000130 is incomplete. The denylist only rejects URLs matching service:jmx:rmi:///jndi/ldap:.*, but attacker-c...

CVE-2026-84218

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...