EUVD-2026-75780

IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of the application process by constructing a flow with an MCP Tools component configured to use a local stdio subprocess...

EUVD-2026-75803

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization...

EUVD-2026-75801

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the...

react2shell-CVE-2025-55182-poc

CVE-2025-55182 React2Shell PoC - WAF 우회 포함 CVE-2025-55182일명 React2Shell를 위한 깔끔하고 신뢰할 수 있는 Python 개념 증명 익스플로잇입니다. 이는 Next.jsApp Router 및 유사 프레임워크에서 사용되는 React Server Components의 중요 원격 코드 실행 취약점입니다. 이 PoC는 대규모 멀티파트 본문의 심층 검사를 제한하는 일반적인 웹 애플리케이션 방화벽Cloudflare, AWS WAF 등을 우회하기 위한 동적 WAF 우회 패딩 을 포함합니다...

CVE-2026-81906

Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A deactivated or unvalidated user with an existing OAuth binding could complete authentication and receive a session that was fully...

DAHUA_AUTH-BYPASS-CVE-2021-33044

Симуляция эксплуатации Dahua Authentication Bypass PoC CVE-2021-33044 Обзор IP-камеры Dahua — это IoT-устройства, широко используемые в системах видеонаблюдения. Поскольку они часто развертываются в локальных сетях или имеют доступ из Интернета, уязвимости в IP-камерах могут серьезно повлиять на...

CVE-2019-16098

CVE-2019-16098 Драйвер в Micro-Star MSI Afterburner 4.6.2.15658 также известный как RTCore64.sys и RTCore32.sys позволяет любому аутентифицированному пользователю читать и записывать произвольную память, порты ввода-вывода и MSR. Это может быть использовано для повышения привилегий, выполнения ко...

APOLOGEE

🌀 APOLOGEE - Сканер полевых панелей Siemens: APOLOGEE — это скрипт на Python и модуль Metasploit, который перечисляет скрытый каталог на контроллерах автоматизации Siemens APOGEE PXC BACnet все версии до V3.5 и TALON TC BACnet все версии до V3.5. С оценкой CVSS 7.5 эта эксплойт позволяет...

CVE-2026-87107

Consul and Consul Enterprise are vulnerable to an authorization bypass...

PT-2026-89875

NetBSD contains an information disclosure vulnerability in mm open within sys/dev/mm.c that allows unprivileged local users to obtain real kernel virtual addresses by opening world-accessible devices such as /dev/null or /dev/zero, which incorrectly receive the PK KMEM process flag. Attackers can...

PT-2026-90516

A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...

Linux Distros Unpatched Vulnerability : CVE-2026-88018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with...

openSUSE 16: tomcat10 / tomcat10-admin-webapps / tomcat10-el-5_0-api / etc (openSUSE-SU-2026:21810-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21810-1 advisory. - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Doma...

PT-2026-90319

In the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass after ptrace with TSYNC Sashiko review pointed out the following issue. If a thread is stopped in syscall trace enter for ptrace, another thread can install a seccomp filter with SECCOMP FILTER FLAG TSYN...

CVE-2026-79395

An improper authentication vulnerability in the WS-Security wsse:UsernameToken verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote attackers to bypass authentication and execute privileged ONVIF actions including...

PT-2026-90548

Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI external $ref dereferencing, but the latest patched dependency mcp-from-openapi 2.3.0 still makes backend-origin requests to loopback when the target is reached through hostname...

EUVD-2026-76192

An improper authentication vulnerability in the WS-Security wsse:UsernameToken verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote attackers to bypass authentication and execute privileged ONVIF actions including...

PT-2026-89741

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

Linux Distros Unpatched Vulnerability : CVE-2026-87107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-import...

Ubiquiti UniFi OS Server < 5.1.37 Multiple Vulnerabilities

The version of Ubiquiti UniFi OS Server installed on the remote host is prior to 5.1.37. It is, therefore, affected by multiple vulnerabilities: - A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability fou...