CVE-2026-17153

AI Agent by SiteGround plugin (≤1.2.7) has a missing authorization check on its /generate-content REST endpoint, allowing authenticated Contributor-level users to upload images to the media library despite lacking the upload_files capability. The sg_ai_studio_gutenberg_nonce is issued to any bloc...

CVE-2026-17153 AI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint

The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to upload images...

CVE-2026-64849

A flaw was found in MLflow. An unauthenticated remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability by sending a specially crafted request to the webhook test endpoint. This occurs because the system validates only the initial URL, but then follows unvalidated HTTP...

CVE-2026-76795 AeternaLabsHQ PullMD REST API Endpoint api server-side request forgery

A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the component REST API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to th...

EUVD-2026-62917

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could create or modify a scripted lookup through generic configuration endpoints and run an installed lookup script with the permissions of the user account running...

CVE-2026-76764

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

Keycloak 26.6.x < 26.6.6 Multiple Vulnerabilities

The version of Keycloak installed on the remote host is 26.6.x prior to 26.6.6. It is, therefore, affected by multiple vulnerabilities: - A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak. The mechanism used to protect the account-linking process from unauthoriz...

JetBrains YouTrack < 2026.2.18177 DoS (CVE-2026-75047)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18177. It is, therefore, affected by a denial of service vulnerability: - A DoS attack was possible via a decompression bomb in the import endpoint. CVE-2026-75047 Note that Nessus has not tested for this issue but...

JetBrains YouTrack < 2026.1.13903 / 2026.2.x < 2026.2.17950 Information Disclosure (CVE-2026-75049)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.1.13903, or 2026.2.x prior to 2026.2.17950. It is, therefore, affected by an information disclosure vulnerability: - An authenticated user could read restricted articles from other projects via the draft creation...

PT-2026-78873

Name of the Vulnerable Software and Affected Versions code-projects Employee Management System version 1.0 Description A SQL injection flaw exists in the Admin Login Endpoint within the /process/aprocess.php file. The issue occurs when the mailuid argument is manipulated, allowing for remote...

PT-2026-78919

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18n messages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial ...

PT-2026-79138

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attachments into a full raster before checking decoded dimensions, pixel count, or memory use in the GET /api/v1/message/id/part/partID/thumb endpoint. The Thumbnail handler in...

JetBrains YouTrack < 2026.2.18112 Information Disclosure (CVE-2026-75046)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18112. It is, therefore, affected by an information disclosure vulnerability: - An authenticated user could enumerate accounts via the users search endpoint. CVE-2026-75046 Note that Nessus has not tested for this...

PT-2026-78918

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

CVE-2026-1657

CVE-2026-1657：EventPrime 插件中的未认证任意文件上传漏洞 免责声明： 此仓库仅用于教育目的和负责任的披露 。该漏洞已负责任地向厂商报告并已修复。请勿利用此信息在未经授权的情况下攻击系统。 摘要 在 EventPrime WordPress 插件（版本 = 4.2.8.1）中发现了一个 未认证的任意文件上传 漏洞。该缺陷允许任何未认证访客将文件直接上传到 WordPress 的 uploads 目录，并在媒体库中创建附件记录。 该漏洞源于一个特定的 AJAX 端点被显式注册为...

CVE-2025-13390

CVE-2025-13390 WP Directory Kit WordPress 的 WP Directory Kit 插件在所有版本（包括 1.4.4）中均存在认证绕过漏洞，原因是wdkgenerateautologinlink 函数中的认证算法实现不正确。 该漏洞源于使用了密码学上弱的令牌生成机制。这使 未认证攻击者 能够通过可预测的令牌，利用自动登录端点获得管理员访问权限，并 完全接管网站 。 CNA： Wordfence 基础评分： 10.0 严重 向量： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H ⚡ 漏洞利用特点 Cookie...

CVE-2023-20198-Exploit

Cisco IOS XE 身份验证绕过（CVE-2023-20198） 此仓库包含针对 CVE-2023-20198 的概念验证（PoC）漏洞利用程序 ，该漏洞是影响 Cisco IOS XE Web UI 的身份验证绕过漏洞。 该漏洞允许未认证攻击者 通过精心构造的 SOAP 请求在受影响的 Cisco 设备上执行任意命令，可能导致设备完全失陷 ，包括远程命令执行 以及创建/删除管理用户 。 漏洞概述 CVE ：CVE-2023-20198 受影响产品 ：Cisco IOS XE（Web UI / WSMA 接口） 影响 ： 身份验证绕过 远程命令执行（RCE） 未授权创建用户...

CVE-2026-76402

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API could configure a non-secure Hypertext Transfer Protocol HTTP Event Collector endpoint in Splunk Enterprise that causes the connector to send...

CVE-2026-76352

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could create or modify a scripted lookup through generic configuration endpoints and run an installed lookup script with the permissions of the user account running...

home_SOC_suite

个人SOC套件 — Night's Watch 一个在Anwendungsentwicklung再培训项目中从零开始构建的个人安全运营中心（SOC）。该套件监控Windows终端的网络异常、资源峰值、进程执行、注册表更改、安全事件日志活动、计划任务更改、DNS查询和电源事件——将所有内容记录到结构化文件中，以便通过Python引擎进行每周分析和关联。 单页Flask仪表盘。12个采集器+关联引擎全部激活，实时资源监控器，出站连接馈送，采集器事件磁贴，以及流式引擎告警。 背景...