gha-lab-40e23db109

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gradio-app/gradio at commit...

CVE-2026-75604

CVE-2026-75604 RCE PoC Python proof of concept for CVE-2026-75604, an unauthenticated remote command execution vulnerability in Windows-hosted Next.js applications that use both the Pages Router and App Router without Cache Components. Demonstration Requirements Next.js =13.4 =16.0 16.3.3 Native...

CVE-2026-7671

CVE-2026-7671 - Tornet Scooter OTP Brute Force Summary Improper restriction of excessive authentication attempts CWE-307 in Tornet Scooter Mobile App 4.75 on Android. Details The /TwoFactor endpoint does not implement rate limiting or lockout. A 4-digit OTP 0000-9999 can be brute-forced remotely...

passera

Примечание: У меня больше нет времени продолжать разработку Passera, но пул-реквесты приветствуются! Самым востребованным пунктом было бы обновлённое расширение для Firefox, так как последнее изменение API сломало текущую версию. Passera Простой инструмент, который позволяет пользователям иметь...

next-rep-CVE-2026-4800

This is a Next.js project bootstrapped with create-next-app. Getting Started First, run the development server: npm run dev or yarn dev or pnpm dev or bun dev Open http://localhost:3000 with your browser to see the result. You can start editing the page by modifying app/page.tsx. The page...

social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing

ImpactThe vk-app backend accepted VK application callback data without verifying the callback signature when the authkey parameter was omitted.Applications using this backend could treat unsigned attacker-controlled data as a verified VK identity. An attacker could choose callback fields such as...

PYSEC-2026-4165 social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing

Impact The vk-app backend accepted VK application callback data without verifying the callback signature when the authkey parameter was omitted. Applications using this backend could treat unsigned attacker-controlled data as a verified VK identity. An attacker could choose callback fields such a...

Signal-Desktop

Signal Desktop Signal Desktop links with Signal on Android or iOS and lets you message from your Windows, macOS, and Linux computers. Install the production version or help us out by installing the beta version. Got a question? You can find answers to a number of frequently asked questions on our...

ios-nehelper-enum-apps-0day

nehelper enumerate installed apps 0-day iOS 15.0 I've updated this code to avoid using Private API directly. Read more in my blog post. However, that means that now this code is iOS version-specific and possibly device model-specific. So if it doesn't work on your device, recalculate and update t...

CLEANSTART-2024-UA33710 Use after free in App Service in Google Chrome prior to 102

Security vulnerability affects the chromium package. Use after free in App Service in Google Chrome prior to 102...

CVE-2026-103544

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...

CVE-2026-103544 datadrivenconstruction OpenConstructionERP Al Provider Configuration ai_client.py wrong session

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...

CVE-2026-103544

A vulnerability exists in datadrivenconstruction OpenConstructionERP up to version 14.8.1 within the AI Provider Configuration Handler component. Specifically, an unknown function in the file backend/app/modules/ai/ai_client.py allows for data manipulation that results in the exposure of data ele...

EUVD-2026-90521

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...

CVE-2026-103544 datadrivenconstruction OpenConstructionERP Al Provider Configuration ai_client.py wrong session

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: ggshield, az, dask-kubernetes, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, datadog-agent, kubeflow-pipelines-visualization-server, jupyter-base-notebook, k8s-sidecar, kubeflow-pipelines, kubeflow-katib, open-webui, kserve...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: ggshield, az, dask-kubernetes, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, datadog-agent, kubeflow-pipelines-visualization-server, jupyter-base-notebook, k8s-sidecar, kubeflow-pipelines, kubeflow-katib, open-webui, kserve...

CVE-2026-103533 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

CVE-2026-103532 immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared Link Preview Handler. The manipulation of the argument Password leads to improper authorization. The attack may be...

CVE-2026-103532 immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared Link Preview Handler. The manipulation of the argument Password leads to improper authorization. The attack may be...