CVE-2026-54076 ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)

ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the fix for CVE-2026-44221 added an UPDATESCHEMA authorization check only to LocalDocumentType.createProperty, while the remaining public schema mutators in engine/src/main/java/com/arcadedb/schema/LocalDocumentType.java and...

CVE-2026-54076

ArcadeDB (Multi-Model DBMS) versions prior to 26.6.1 suffer from an incomplete authorization fix for CVE-2026-44221. The UPDATE_SCHEMA permission check was added only to LocalDocumentType.createProperty, leaving other public schema mutators in LocalDocumentType.java and LocalProperty.java unprote...

CVE-2026-59973

CVE-2026-59973 is a bypass of a prior SSRF fix in FrontMCP 's OpenAPI adapter. The affected packages are mcp-from-openapi (2.3.0–2.5.0) and frontmcp / @frontmcp/adapters (1.2.1–1.5.0). The loadOpenAPISpec() function forwards untrusted OpenAPI URLs to OpenAPIToolGenerator.fromURL() / fromJSON(), w...

Vulnerability-CVE-2025-64446-CVE-2025-58034

FortiWeb エクスプロイトシミュレーション CVE-2025-64446 & CVE-2025-58034 注意: このドキュメントは学習およびセキュリティ研究目的のみです。 許可なくシステムを攻撃するために使用しないでください。 1. 概要 FortiWebはWebアプリケーションファイアウォール（WAF）であり、Webアプリケーションを保護するために使用されます。 2025年には、2つの深刻な脆弱性が発見されました： CVE-2025-64446 – パストラバーサルによる認証バイパス CVE-2025-58034 – OSコマンドインジェクション 2...

EUVD-2026-78779

SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling directory such as /data/safe-but-unsafe to...

CVE-2026-47215 Singularity: Incorrect path matching for 'limit container paths' directive

SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling directory such as /data/safe-but-unsafe to...

CVE-2026-47215

SingularityCE and SingularityPRO are open-source container platforms affected by an incorrect path-string matching flaw in the limit container paths directive of singularity.conf. Under setuid mode , a container in a sibling directory (e.g., /data/safe-but-unsafe) can be executed when only /data/...

CVE-2026-55701

Removed by vendor...

CVE-2026-55701

The OpenTelemetry Collector Contrib githubreceiver component contains an authentication bypass. Prior to 0.151.0 , the handleReq() function in trace_receiver.go does not enforce the RequiredHeaders configuration on incoming webhook requests—those headers are only validated at startup in config.go...

CVE-2026-55701 OpenTelemetry githubreceiver silently ignores configured required_headers authentication

The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver validates the receiver/githubreceiver/config.go RequiredHeaders configuration at startup, but receiver/githubreceiver/tracereceiver.go handleReq does not check...

com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

A flaw was found in jackson-databind. The UnwrappedPropertyHandler.processUnwrapped method, responsible for handling @JsonUnwrapped properties, replays buffered JSON without properly checking the active view. This allows an attacker to write data to a property annotated with both @JsonView and...

CVE-2026-0257

CVE-2026-0257 PAN-OS GlobalProtect 認証バイパスの脆弱性 ⚡ 簡単な使い方 このプロジェクトは、以下のような安全で許可された環境でのみ使用してください： ローカル仮想マシン Docker コンテナ 隔離されたラボ環境 許可されたペネトレーションテスト環境 設定例： root@kitploit: git clone https://github.com/HORKimhab/CVE-2026-0257 cd CVE-2026-0257 Create virtual environment python -m venv venv Active virtual...

CVE-2026-55178 GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

GeoLens is a self-hosted geospatial data catalog with semantic search, OGC and STAC APIs, and a map builder. Prior to 1.2.3, multiple read and link endpoints authorize only the resource named in the request URL and fail to re-authorize a second caller-influenced dataset reached through a...

CVE-2018-10933

CVE-2018-10933 - libssh 認証バイパス CVE-2018-10933 の概念実証（Proof-of-Concept）実装です。これは、libssh のサーバーサイド実装に影響する重大な認証バイパス脆弱性です。 免責事項 このリポジトリは、教育目的、脆弱性研究、および許可されたセキュリティテストのためにのみ提供されています。明示的な許可なしにシステムをテストしないでください。 CVE-2018-10933 は、libssh のサーバーサイド状態機械 で発見された重大な認証バイパス脆弱性 です。...

CVE-2026-25197

CVE-2026-25197: ユーザー制御キーによる認証バイパス IDOR 勧告 フィールド| 値 ---|--- CVE| CVE-2026-25197 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 9.1 Critical Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-639 Authorization Bypass Through User-Controlled Key Researcher| Michael Groberman — Gr0m Published|...

linux-kernel-codex-harness-v2

Kernel Codex Harness v2 한국어 | English 研究工具 · 原始导入：2026年4月3日 · v2 文档修订：2026年7月11日 外部信号：从注意力分配到溯源感知分类 使用可复现的观察结果引导模型注意力，然后使用仓库溯源组织审查队列——绝不用于声称证明。 项目谱系—— Kernel Codex Harness v1 · 注意力分配 → Kernel Codex Harness v2 · 溯源感知分类 项目状态。 本仓库是一个 LLM 辅助研究工具，将 v1 的注意力分配工作流发展为溯源感知分类，用于实际的 Linux 内核漏洞研究。此版本被用于发现以...

BUK_TS_KILLER

BUKTSKILLER BUK-TS 远程代码执行漏洞利用工具 认证绕过 - CVE-2026-12183： 1. 输入任意密码 2. 拦截响应 3. 写入 "userid=" 4. 成功绕过 针对 BDU:2025-13914 和 CVE-2026-3843 的公开漏洞利用程序...

RedTeamScripts

RedTeamScripts 包含各种红队脚本的仓库。 kill.exe 在红队行动期间执行各种活动时，你可能会运行多个进程，而这些进程你并不想手动关闭。kill.exe 就是为你准备的。将其复制到 C:\Windows\ 目录下，然后直接调用它并传入你想要终止的进程名称即可。 root@kitploit: kill mspaint killing mspaint 16524 killing mspaint 5284 killing mspaint 8568 killing mspaint 32244 killing mspaint 18908 killing mspaint 12600...

EUVD-2026-78592

XWiki Platform is a generic wiki platform. From 13.4-rc-1 until 16.10.17, 17.4.10, 17.10.4, and 18.1.0-rc-1, the Live Data edit REST API allows a user who can edit a page to change that page's rights without executing the normal document-saving authorization checks. The user can grant script righ...

CVE-2026-53966

In XWiki Platform (a generic wiki platform), the Live Data edit REST API fails to perform normal document-saving authorization checks when a user modifies page rights. Any user with edit permission can escalate to script right, enabling execution of potentially dangerous Velocity scripts or deliv...