CVE-2026-31431-exploit

CVE-2026-31431 ПРЕДУПРЕЖДЕНИЕ Данные реализации LPE для Linux являются разрушительными во время выполнения. Они перезаписывают представление page-cache привилегированных целей, таких как: su файлы конфигурации PAM любой файл, переданный в режим patch Обычно это не является постоянным изменением н...

CVE-2025-56801

CVE-2025-56801 Уязвимость генерации IV в AES-CFB в настольном приложении Reolink 1. Обзор Название : Настольное приложение Reolink Версия : 8.18.12 Производитель : Reolink CWE : CWE-1204: Генерация слабого вектора инициализации IV, CWE-321: Использование жёстко заданного криптографического ключа...

CVE-2023-5043

CVE-2023-5043 Ingress nginx 어노테이션 주입으로 인한 임의 명령 실행 1. Ingress 생성 Service와 Pod 없이 생성 가능 apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: ingress-exploit annotations: kubernetes.io/ingress.class: "nginx" nginx.ingress.kubernetes.io/configuration-snippet: | moresetheaders "robinak"...

CVE-2026-29597

CVE-2026-29597: 부적절한 접근 제어 DDSN Interactive cm3 Acora CMS 버전 10.7.1에는 부적절한 접근 제어 취약점이 존재합니다. 편집자 권한을 가진 사용자는 “/Admin/filemanager/filedetails.asp” 엔드포인트를 강제 브라우징하고 “file” 매개변수를 조작하여 민감한 구성 파일에 접근할 수 있습니다. 특정 파일예: cm3.xml을 참조함으로써 공격자는 시스템 관리자 자격 증명, SMTP 설정, 데이터베이스 자격 증명 및 기타 기밀 정보를 검색할 수 있습니다. 이러한...

exploit-CVE-2026-23744

exploit-CVE-2026-23744 MCPJam Inspector is a local-first development platform for MCP servers. In versions 1.4.2 and earlier, a RCE flaw lets attackers send crafted HTTP request that installs an MCP server and runs code remotely, because the service listens on 0.0.0.0 instead of 127.0.0.1 by...

CVE-2026-78578

Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticated adjacent attacker can submit unauthorized wireless configuration parameters, causing the camera to attempt connection to a different network. Successful...

CVE-2026-102294

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...

CVE-2026-78578

TP-Link Tapo C120 v1 and C200 v5 security cameras are vulnerable to a denial-of-service condition because the HTTPS onboarding connect action does not enforce authentication after the initial setup. An unauthenticated adjacent attacker can exploit this by submitting unauthorized wireless configur...

EUVD-2026-90982

Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticated adjacent attacker can submit unauthorized wireless configuration parameters, causing the camera to attempt connection to a different network. Successful...

CVE-2026-102294 Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...

EUVD-2026-90974

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...

CVE-2026-102294

The TP-Link TL-WR841N router is susceptible to an authenticated OS command injection vulnerability within the IPv6 WAN configuration . The root cause is the improper incorporation of a crafted IPv6 Gateway value into a system command. This allows an authenticated administrator to execute arbitrar...

CVE-2026-3288-lab

CVE-2026-3288 Vulnerable Lab Docker NGINX Ingress Controller Configuration Injection ⚠️ WARNING : This lab contains intentionally vulnerable configurations for AUTHORIZED SECURITY TRAINING ONLY Vulnerability Overview CVE-2026-3288 CVSS 8.8 HIGH - Configuration injection in NGINX Ingress Controller...

cve-2026-33032-scanner

CVE-2026-33032 Scanner Non-destructive vulnerability scanner for Nginx-UI MCP Endpoint Authentication Bypass Vulnerability Overview CVE-2026-33032 is an authentication bypass vulnerability in nginx-ui's Model Context Protocol MCP integration. The /mcpmessage endpoint lacks authentication middlewa...

CVE-2025-41089

CVE-2025-41089: Reflected XSS in Xibo CMS I have discovered a Reflected Cross-Site Scripting XSS vulnerability in Xibo CMS v4.1.2. This issue stems from the application's failure to properly sanitize user-supplied input in the 'Configuration Name' field of certain widgets within the template...

hephaestus-server-forger

Server security auditor for Apache, Nginx & IIS — 13 scan phases, 70+ finding codes, AI-powered hardening guides. Quick Start · Documentation · Docker · AI Analysis · Star on GitHub In Action Live scan · Apache 2.4.54 · 11 findings · 44.17s · scan 518 · safe mode !Hephaestus — HTML re...

PYSEC-2026-4175 urllib3: HTTPS proxy TLS configuration may be ignored or overridden

Impact urllib3 supports configuring TLS independently for an HTTPS proxy and the target server. proxysslcontext, proxyasserthostname, and proxyassertfingerprint configure the TLS connection to the proxy. sslcontext and the other target-specific TLS parameters configure the connection to the targe...

urllib3: HTTPS proxy TLS configuration may be ignored or overridden

Impacturllib3 supports configuring TLS independently for an HTTPS proxy and the target server.proxysslcontext, proxyasserthostname, and proxyassertfingerprint configure the TLS connection to the proxy. sslcontext and the other target-specific TLS parameters configure the connection to the target...

Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

SummaryExternal knowledge connections are created and owned by administrators, and are shared by every external knowledge base bound to them. Deleting an external knowledge base also removed that connection from the instance configuration, with no check on the caller's role and no check for other...

CVE-2026-102826

A flaw was found in simple-git. The library fails to properly sanitize Git configuration directives passed through custom clone arguments, which allows Git to load an attacker-controlled configuration file. By specifying executable settings within that configuration, an attacker can achieve...