6776 matches found
CVE-2026-86283 MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Data
MISP's UiBeta theme collection view app/View/Themed/UiBeta/Collections/view.ctp performed a secondary query of member events by UUID without applying the caller's access control list ACL. The CollectionsController::view action correctly resolved collection element UUIDs through...
CVE-2026-86283
MISP 's UiBeta theme collection view template (app/View/Themed/UiBeta/Collections/view.ctp) contained an authorization bypass : while the controller correctly enforced per-user event ACL via Event::fetchSimpleEvents(), the view independently re-queried the same event UUIDs using only an Event.uui...
cves-collection
cve-colle...
CVE-2026-86090
creationtimestamp| type| source ---|---|--- 2026-09-06 06:11:54+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutdkg5dke2l 2026-09-06 07:07:56+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutgolfbcq2x 2026-09-10 03:30:04+00:00| seen|...
CVE-2026-85689
llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer llmware/resources.py where filter and lookup values are directly string-interpolated into SQL WHERE clauses without parameterization or escaping, in both the SQLite and PostgreSQL backends. The filter validator...
compfest-ctf-2026
COMPFEST CTF 2026 — Writeups & Solutions Solutions, exploits,...
CVE-2026-85689 llmware 0.4.6 SQL Injection via unescaped filter values
llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer llmware/resources.py where filter and lookup values are directly string-interpolated into SQL WHERE clauses without parameterization or escaping, in both the SQLite and PostgreSQL backends. The filter validator...
CVE-2026-85689 llmware 0.4.6 SQL Injection via unescaped filter values
llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer llmware/resources.py where filter and lookup values are directly string-interpolated into SQL WHERE clauses without parameterization or escaping, in both the SQLite and PostgreSQL backends. The filter validator...
CVE-2026-85689
llmware 0.4.6 contains an SQL injection vulnerability in its collection-database layer (llmware/resources.py). Filter and lookup values are directly string-interpolated into SQL WHERE clauses without parameterization or escaping, affecting both the SQLite and PostgreSQL backends. The filter valid...
CVE-2026-85689 llmware 0.4.6 SQL Injection via unescaped filter values
llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer llmware/resources.py where filter and lookup values are directly string-interpolated into SQL WHERE clauses without parameterization or escaping, in both the SQLite and PostgreSQL backends. The filter validator...
EUVD-2026-71138
llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer llmware/resources.py where filter and lookup values are directly string-interpolated into SQL WHERE clauses without parameterization or escaping, in both the SQLite and PostgreSQL backends. The filter validator...
CVE-2026-85665 Bruno 3.4.2 Arbitrary File Read via Unconfined Body File Path
Bruno versions through 3.4.2 fail to validate file paths in request body declarations, allowing attackers to read arbitrary local files by using parent-directory traversal segments. When a collection is executed, attackers can craft a request with a body:file path containing ../ sequences that...
HTSOC
HTSOC — Integrated SOC System for Event Monitoring, Detection, and Investigation HTSOC is a self-built Security Operations Center system in a lab environment. The system combines log collection, detection with Splunk, alert/case management with TheHive, Observable analysis with Cortex, IOC lookup...
Malicious code in line-through (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f080fb3d5e59c5c950dd4dd0c2eb1841cdc2943e1543bd7803f7ca27d1756e60 The package's package.json preinstall hook runs vishu.js, which at npm install time collects the installer's public IP via api.ipify.org, OS hostname...
MAL-2026-15869 Malicious code in mcp-consultasdeveiculos-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb4363d5425f97beac0872e7e266983ebf4734da51c66ff674227108762c762c Package bin/main script, invoked as npx -y mcp-consultasdeveiculos-client --token per the referenced upstream project's public instructions, reads...
CVE-2026-85664: Allocation of Resources Without Limits or Throttling
Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters maxneighbors, efconstruction, and efsearch in collection-create requests. Unauthenticated attackers can supply arbitrarily large parameter values to exhaust server memory and cause denial of service during index compaction...
PT-2026-85575
llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer llmware/resources.py where filter and lookup values are directly string-interpolated into SQL WHERE clauses without parameterization or escaping, in both the SQLite and PostgreSQL backends. The filter validator...
Zimbra CVE-2026-73570 Incident Response Toolkit
Zimbra CVE-2026-73570 Incident Response Toolkit is a collection of detection and evidence-preservation utilities for administrators investigating suspected exploitation of CVE-2026-73570. The toolkit searches Zimbra and mail logs for exploitation indicators, examines JSP persistence locations,...
ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332)
A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted...
ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332)
A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted...