firmwalker

firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...

CVE-2026-84697

Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/6145 IPv4-translated IPv6 prefix, allowing server-side request forgery to internal destinations. Attackers can supply hostnames resolving to these addresses in message content to...

CVE-2026-84697 Mailpit SSRF Deny List Bypass via Azure Metadata and IPv6 Prefix

Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/6145 IPv4-translated IPv6 prefix, allowing server-side request forgery to internal destinations. Attackers can supply hostnames resolving to these addresses in message content to...

PT-2026-84606

The MotoPress Appointment Booking WordPress plugin before 2.4.8 does not perform an authorization or ownership check when handling a user-supplied booking identifier on an unauthenticated endpoint, allowing unauthenticated attackers to permanently delete other users' reservations. This is an...

PT-2026-84889

Name of the Vulnerable Software and Affected Versions Drupal AI Translate versions 0.0.0 through 1.3.2 Drupal AI Translate versions 1.4.0 through 1.4.1 Description An authorization flaw allows forceful browsing within the module used for automatic entity translation. The system fails to...

PT-2026-84782

Name of the Vulnerable Software and Affected Versions Jenkins Script Security Plugin versions prior to 1412.v7737b 3405f86 Description An issue exists where a permission check is not enforced in the method controlling the "Force the use of the sandbox globally in the system" setting. This allows...

CVE-2026-84697: Server-Side Request Forgery (SSRF)

Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/6145 IPv4-translated IPv6 prefix, allowing server-side request forgery to internal destinations. Attackers can supply hostnames resolving to these addresses in message content to...

PT-2026-84634

The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...

CVE-2026-84804: Improper Access Control

Kimai before 2.65.0 fails to properly validate permissions when removing team access to activities, projects, and customers via API endpoints. Authenticated users with editteam permission can revoke team access without the required permissionsactivity check, bypassing authorization controls...

PT-2026-84886

Name of the Vulnerable Software and Affected Versions Drupal Advanced Search versions 0.0.0 through 2.4.5 Description A missing authorization issue allows forceful browsing. The module fails to sufficiently verify block access when arbitrary block IDs are submitted to its publicly accessible AJAX...

CVE-2026-77787: Missing Authorization

The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the supplied object identifier across object types, allowing users with the Author role and above to modify the SEO metadata of terms they cannot edit...

Incorrect permission check in Appearance configuration page

Jenkins 2.421 through 2.579 both inclusive, LTS 2.426.1 through 2.568.2 both inclusive does not correctly perform permission checks in the Appearance configuration page added in Jenkins 2.421. This allows attackers with Overall/Manage permission to modify Appearance configuration options they...

Missing permission check allows reading build parameters

Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not perform an Item/Read permission check in an HTTP endpoint. This allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to. Jenkins 2.580, LTS 2.568.3 performs a...

Missing permission check allows canceling builds

The build command of the Jenkins CLI can be invoked with the -s flag to wait for a triggered build to complete, canceling the build when the CLI client is interrupted. Jenkins merges multiple requests to build the same job with the same parameters into a single queue item. In Jenkins 2.579 and...

gegl04 security update

0.4.62-1.2 - Fix CVE-2026-18300: bounds check in rgbereadscanlines...

PT-2026-84621

The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the supplied object identifier across object types, allowing users with the Author role and above to modify the SEO metadata of terms they cannot edit...

PT-2026-84776

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.421 through 2.579 Jenkins LTS versions 2.426.1 through 2.568.2 Description Insufficient permission checks on the Appearance configuration page allow users with Overall/Manage permissions to modify configuration options they...

CVE-2026-84656: Missing Authorization

A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to...

PT-2026-84780

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.580 Jenkins LTS versions prior to 2.568.3 Description The build CLI command fails to verify the Item/Cancel permission when the -s flag is used to cancel a build that was triggered to wait for completion. This allow...

PT-2026-84779

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.580 Jenkins LTS versions prior to 2.568.3 Description A missing permission check allows attackers who possess Item/Read permission on at least one job to read build parameter names and values of jobs to which they...