golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting XSS attacks, where...

CVE-2026-48017

CVE-2026-48017 — Remote Code Execution in DbGate via functionName injection Severity : High CVSS 8.8 CWE : CWE-94 — Improper Control of Generation of Code 'Code Injection' Affected : dbgate-api ≤ 7.1.8 patched in 7.1.9 Advisory : GHSA-hv83-ggc4-v385 NVD :...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.14 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.14 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

CVE-2026-35273

🚨 CVE-2026-35273 - Oracle PeopleSoft PeopleTools 未認証リモートコード実行 ⚠️ Oracle PeopleSoft PeopleTools における重大な未認証RCE Oracle PeopleSoft Enterprise PeopleTools に影響を与える脆弱性であり、リモートの攻撃者が認証なしで脆弱なシステムを侵害することを可能にします。 📖 概要 CVE-2026-35273 は、Oracle PeopleSoft Enterprise PeopleTools の Updates Environment Management...

nextjs-security-update

nextjs-security-update 새 Next.js 취약점을 악용하는 OSS 도구를 만드는 사람들이 있습니다. 이는 맞서 싸우기 위한 도구입니다. 모든 GitHub 계정에 있는 모든 Next.js 앱을 매우 쉽게 업그레이드할 수 있게 해줍니다. 내부적으로 공식 Vercel 수정 도구를 사용합니다. 무슨 일이 있었나 2025년 12월 11일: Next.js가 App Router를 사용하는 React Server Components에 영향을 미치는 여러 가지 치명적인 취약점을 공개했습니다: CVE-2025-66478 RCE...

EUVD-2026-78367

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...

CVE-2026-47424 OpenAM Authenticated RCE via Groovy Sandbox Escape

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...

CVE-2026-19515

CVE-2026-19515 is an OS command injection vulnerability in the WSO2 Integrator MI VS Code extension . The extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources , allowing a crafted project to inject and execute...

CVE-2026-45051 OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, WebAuthnAuthentication loads a serialized AuthenticatorImpl object graph from the configured userAttribute through loadAuthenticators without an ObjectInputFilter. Exploitation requires the WebAuthn flow to be...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift リバースシェル付き RCE PoC CVE-2026-42945 のリモートコード実行 RCE 概念実証 PoC です。これは NGINX の ngxhttprewritemodule におけるヒープバッファオーバーフローです。このフォークは、公開されているトリガー PoC を拡張し、組み込みのリバースシェルリスナーと、CTF や隔離されたラボ環境向けの設定可能な悪用パラメータを追加しています。 脆弱性概要 CVE ID: CVE-2026-42945 別名: NGINX Rift 影響を受けるコンポーネント:...

CVE-2026-45794

OpenAM Community Edition (through 16.0.6 ) is vulnerable to unsafe Java deserialization (CWE-502) in its Push Notification SNS callback resource (SnsMessageResource ). The route is mounted with anonymous access ; after a message ID expires from the in-memory dispatcher, it falls back to a CTS-sto...

CVE-2026-45794 OpenAM Unsafe Java Deserialization via SNS

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource falls back to a CTS predicate blob after a messageId expires from the in-memory dispatcher, treats top-level blob keys as Java class names fo...

abdal-cve-2026-60137

English | فارسی 🛡️ Abdal CVE-2026-60137 PoC 익스플로잇 Abdal CVE-2026-60137 은 WPQuery의 authornotin 매개변수에 대한 불충분한 검증을 확인하는 방어적 WordPress 노출 검증 도구로, CVE-2026-60137 로 추적됩니다. 이 취약점은 신뢰할 수 없는 입력이 영향을 받는 매개변수에 도달할 때 SQL 인젝션을 허용할 수 있습니다. 영향을 받는 WordPress 6.9 및 7.0 릴리스에서는 wp2shell 원격 코드 실행 경로의 일부로...

CVE-2026-9256-Poc

nginx ngxhttprewritemodule 힙 버퍼 오버플로우 설명 nginx Plus 및 nginx 오픈 소스 ngxhttprewritemodule에 힙 버퍼 오버플로우 취약점이 존재합니다. rewrite 지시문이 중첩된 PCRE 캡처 그룹예: ^/.$이 있는 정규식과 여러 캡처를 참조하는 대체 문자열예: $1&y=$2을 사용할 때, 정적 경로 버퍼 크기 계산이 필요한 공간을 과소평가하여 실제 쓰기가 할당된 크기Pool Slip를 초과하게 됩니다. 인증되지 않은 공격자는 조작된 HTTP 요청을 통해 이를 트리거하여 작업...

CVE-2026-62379 OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback

Open Access Management OpenAM is an access management solution. Prior to 16.1.2, the pre-authentication /authservice PLL endpoint accepts a CustomCallback XML element whose className value selects an arbitrary Java class for AuthXMLUtils to load and instantiate without verifying that it implement...

CVE-2026-44793 OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget`

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, certain federation endpoints in a non-default clustered configuration inconsistently encode user-supplied parameters rendered into HTML in the SAML2 cluster cookie-hash redirect path. An unauthenticated attacker can...

CVE-2026-40858

camel-infinispan リモート集約リポジトリの安全でないデシリアライゼーション再現コード CVE-2026-40858 このプロジェクトは、Apache Camel の camel-infinispan コンポーネントにおける Java デシリアライゼーションの脆弱性 CVE-2026-40858 として追跡 を示しています。ProtoStream ベースの リモート集約リポジトリ は、集約された各 Exchange をリモートの Infinispan キャッシュにシリアライズし、エントリを読み戻すとき get / recover に...

llama-factory-webui-rce-cve-2026-58116-trust-remote-code-model-path-injection

CVE-2026-58116 — LLaMA-Factory WebUI RCE trustremotecode를 통한 CVE-2026-58116 CVSS 9.8 심각에 대한 개념 증명: LLaMA-Factory = v0.9.5에서의 원격 코드 실행. LLaMA-Factory WebUI는 모델 로드 시 trustremotecode=True를 하드코딩합니다 src/llamafactory/webui/chatter.py:139 및 runner.py:175,320. 공격자가 제어하는 "Model path" 필드는 검증되지 않은 상태로...

postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl

A flaw was found in PostgreSQL. An integer wraparound vulnerability in 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This can lead to arbitrary code execution as the operating system...

postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments

A type confusion vulnerability in PostgreSQL allows any user to execute arbitrary code as the database's operating system user by calling functions with mishandled "internal" data type arguments...