CVE-2026-120338: PrefectHQ prefab-ui: Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno…

Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the launcher starts Deno with unrestricted...

OpenSTAManager 2.10 Module Shell Upload

OpenSTAManager version 2.10 and earlier contains an authenticated arbitrary file upload vulnerability in module update functionality that can allow shell upload. ================================================================================================================================== |...

Linux Distros Unpatched Vulnerability : CVE-2026-9535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk versions: 9.6.1. A specially crafted chaco can lead to an...

PT-2026-135033

Thanks @element hq for adding me to your Security Hall of Fame 💚 Found a way to create files at arbitrary paths in Element Android matrix-android-sdk2. CVE-2026-93406 / GHSA-fr74-76wm-x6pp Advisory: https://t.co/h9KpPOtL92 Hall of Fame: https://t.co/L4gURsJ8zf...

PT-2026-134902

Name of the Vulnerable Software and Affected Versions Beam Cloud Beta9 Worker versions prior to 0.1.756 Description The Beta9 worker serves the sandbox file API from outside the container. The getHostPathFromContainerPath function converts a tenant's container path into a worker path. If the...

openSUSE 16 Security Update : ansible-core (openSUSE-SU-2026:22172-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22172-1 advisory. - CVE-2026-89091: an attacker can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running...

Linux Distros Unpatched Vulnerability : CVE-2026-120210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated...

openSUSE 16: cifs-utils / cifs-utils-devel / pam_cifscreds / etc (openSUSE-SU-2026:22170-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22170-1 advisory. This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc1284932. Tenable h...

OpenSTAManager 2.11.1-beta Module Shell Upload

OpenSTAManager version 2.11.1-beta contains an authenticated arbitrary module upload vulnerability in modules/aggiornamenti/uploadmodules.php. The proof of concept uploads a ZIP module containing a PHP command shell...

CVE-2026-120307: beam-cloud Beta9 worker: The Beta9 worker serves the sandbox file API from outside the container

The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into a worker path. If the unresolved path starts with a mount destination, including the default upload mount at /tmp/.beta9, the remainder is joined onto that...

PT-2026-134689

Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office administrators with store update permission to inject scripts by uploading unsanitized SVG logo file or banner file images. Attackers can upload an SVG with an onload payload served from...

Linux Distros Unpatched Vulnerability : CVE-2026-119375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memory by supplying a WAL file with...

Linux Distros Unpatched Vulnerability : CVE-2026-54659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.5.6, Pagy::I18n.locale= in gem/lib/pagy/modules/i18n/i18n.rb stored locale values verbatim and...

ASB-A-444443479

In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PHP 8.5.12 File Upload Audit Endpoint

A PHP version 8.5.12 file-upload auditing endpoint uses token authentication and IP allowlisting to validate uploads, preserve controlled copies, and verify their SHA-256 integrity...

CVE-2026-48907

CVE-2026-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE extension This tool is for educational and authorized testing purposes only. Use only on systems you own or have explicit permission to test The author is not responsible for any misuse or illegal activities Always obtain proper...

CVE-2026-22804

Termix Stored XSS PoC GHSA-m3cv-5hgp-hv35 This repository contains a Proof of Concept PoC exploit for the Stored Cross-Site Scripting XSS vulnerability in Termix, which can lead to Local File Inclusion LFI in the Electron environment and Session Hijacking. Vulnerability Details Advisory :...

CVE-2025-24813

🚨 CVE-2025-24813 – Apache Tomcat PUT JSP RCE Exploit This repository contains a complete proof-of-concept PoC for CVE-2025-24813 , a Remote Code Execution RCE vulnerability in Apache Tomcat using the HTTP PUT method to deploy a malicious JSP web shell. 🔥 This exploit demonstrates how an attacker...

Better-CVE-2022-29464

Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...

CVE-2026-39813

🛡️ CVE-2026-39813 - Fortinet FortiSandbox Path Traversal Vulnerability 📌 Overview CVE-2026-39813 is a critical path traversal vulnerability affecting Fortinet FortiSandbox. The vulnerability arises due to improper validation of user-supplied file paths, allowing attackers to manipulate directory...