CVE-2026-68578

ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-allowed users can perform arbitrary database writes, DDL, schema mutations, and execute arbitrary JavaScript code via t...

OSV-2026-1101 Security exception in com.google.re2j.Machine$Queue.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=540908715 Crash type: Security exception Crash state: com.google.re2j.Machine$Queue. com.google.re2j.Machine. com.google.re2j.RE2.doExecute...

PT-2026-88182

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v396-v7q4-x2qj. This link is maintained to preserve external references. Original Description GitPython 3.1.50 fails to recognize joined short-option forms such as -u the short form of --upload-pack= when...

MSSQL xp_cmdshell

Optionally impersonate a login e.g. sa, enable xpcmdshell, and execute an OS command NetExec: EXECUTE AS + spconfigure + xpcmdshell. !/usr/bin/env python3 -- coding: utf-8 -- """Enable xpcmdshell and run OS commands NetExec MSSQL xpcmdshell chain.""" from kittysploit import from...

MSSQL Enum Impersonate

Lists logins the current SQL user can EXECUTE AS NetExec: nxc mssql -M enumimpersonate. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate MSSQL impersonation rights NetExec: -M enumimpersonate.""" from future import annotations from kittysploit import class ModuleAuxiliary: info = "name":...

GHSA-P7W7-4929-VPJ5 `@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation

Summary @dynatrace-oss/dynatrace-mcp-server v1.8.5 exposes an HTTP transport mode --http flag that performs no authentication, session validation, or origin/host verification before dispatching MCP tool calls. Any network-reachable attacker can send a raw JSON-RPC tools/call request without an...

CVE-2026-14538

An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of Google mcp-toolbox versions 0.16.1 through 1.4.0 allows an authenticated attacker to bypass allowedDatasets validation checks. The toolbox relies on the BigQuery dry-run API to enfor...

CVE-2026-14538

An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of Google mcp-toolbox versions 0.16.1 through 1.4.0 allows an authenticated attacker to bypass allowedDatasets validation checks. The toolbox relies on the BigQuery dry-run API to enfor...

PT-2026-75995

Summary @dynatrace-oss/dynatrace-mcp-server v1.8.5 exposes an HTTP transport mode --http flag that performs no authentication, session validation, or origin/host verification before dispatching MCP tool calls. Any network-reachable attacker can send a raw JSON-RPC tools/call request without an...

CVE-2026-14538: Improper Authorization

An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of Google mcp-toolbox versions 0.16.1 through 1.4.0 allows an authenticated attacker to bypass allowedDatasets validation checks. The toolbox relies on the BigQuery dry-run API to enfor...

CVE-2026-66803

Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network...

EUVD-2026-51302

Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network...

SUSE CVE-2026-35607

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the fix in commit b6a4fb1 "self-registered users don't get execute perms" stripped Execute permission and Commands from users created via the...

CVE-2026-47876

CVE-2026-47876 is an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter of VMware ESX/ESXi. A local administrator inside a VM using VMXNET3 can potentially execute code on the ESX host; non-VMXNET3 adapters are not affected. Connected documents confirm patches/updates have b...

PT-2026-66599

Name of the Vulnerable Software and Affected Versions Azure Cosmos DB affected versions not specified Description Improper access control allows an unauthorized attacker to execute code over a network. Recommendations At the moment, there is no information about a newer version that contains a fi...

PT-2026-66454

Name of the Vulnerable Software and Affected Versions Eaton Tripp Lite Series PADM firmware affected versions not specified Description Improper input validation in a session management interface allows an authenticated administrator to execute arbitrary commands within a restricted environment...

CVE-2026-8339

A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 inclusive. A malicious, authenticated threat actor who sends a specially crafted payload can achieve full read access to database contents and other unauthorized commands...

CVE-2026-63227

An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server...

PT-2026-65703

A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...

MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair

Memory systems allow agents to retain and reuse information from past interactions, but they can also let malicious content persist. A malicious instruction crafted by an attacker may be stored in long-term memory, recalled much later, and quietly shape a real action. Recent benchmarks increasing...