CVE-2026-107183

A flaw was found in llama.cpp. An unauthenticated remote attacker could exploit this vulnerability by submitting a specially crafted completion request with malformed chat parser parameters. Due to improper memory handling, this request triggers a use-after-free condition that corrupts memory. Th...

CVE-2026-87662

Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade requests, parameters are converted into system command strings and executed through a system shell interface. Because control...

CVE-2026-87662

Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to OS Command Injection (CWE-78) within the firmware download and upgrade component. The root cause is the use of unsanitized parameter strings during upgrade request processing; specifically, control characters and ...

CVE-2026-87662

Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade requests, parameters are converted into system command strings and executed through a system shell interface. Because control...

EUVD-2026-94696

Magic: The Gathering Arena Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds passes a server-supplied URL from a home-screen carousel GoToExternalUrl action directly to the Windows shell via Application.OpenURL/ShellExecuteW without validating the URI scheme or...

CVE-2026-87667

Brocade Fabric OS versions prior to 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to an argument injection vulnerability within the configuration management command-line utility. The flaw occurs because the utility fails to sanitize user-supplied search string options when executing configura...

CVE-2026-87667

An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search...

EUVD-2026-94695

An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search...

CVE-2026-87667

An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search...

Exploit for CVE-2026-61424

CVE-2026-61424 Unauthenticated arbitrary file upload in the D...

POC_CVE-2024-10829

POCCVE-2024-36420 Local reproduction lab and nuclei template draft for CVE-2024-36420 affecting Flowise. Summary CVE-2024-36420 is an arbitrary file read in Flowise caused by unsanitized use of the fileName body parameter in: POST /api/v1/openai-assistants-file This lab was used to validate:...

django-cve-2025-64459

Django CVE-2025-64459 This application demonstrates CVE-2025-64459 affecting multiple Django versions. This vulnerability has been patched in newer releases of Django. SQL Injection SQL Injection is when user-provided input is treated as part of a SQL query, allowing an attacker to change how the...

CVE-2026-21589

💠 CVE-2026-21589 — Atlassian Pre-Auth Arbitrary File Access Unauthenticated Arbitrary File Access via Path Traversal Security research and technical analysis of CVE-2026-21589 affecting multiple Atlassian Data Center products. Overview CVE-2026-21589 is a critical unauthenticated arbitrary file...

CVE-2026-105816

A flaw was found in Vault. This vulnerability allows a privileged operator to achieve arbitrary code execution on the underlying host system. Vault does not consistently verify that stored plugin catalog entries reference binaries located within the designated plugin directory. In configurations...

Exploit for Unrestricted Upload of File with Dangerous Type in Balbooa Forms

CVE-2026-56291 — Unauthenticated Arbitrary File Upload to RCE...

CVE-2026-87685

An arbitrary file manipulation vulnerability exists in the Brocade Fabric OS WebTools management interface, affecting versions before 9.2.2d and 10.0.0 through 10.0.0a1 . The root cause is a failure to properly validate and sanitize a user-supplied status file path parameter during configuration ...

CVE-2026-87685

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file pa...

EUVD-2026-94686

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file pa...

CVE-2026-87685

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file pa...

CVE-2026-87688

An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. The flaw occurs because user-supplied certificate identifiers are processed without adequate sanitization before being executed in external system rout...