Mesop AI Sandbox <= 1.2.2 - Remote Code Execution

Mesop = 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server. id:...

EUVD-2026-119397

Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string of emailed links, so the full request URI, including the token, is written to Vikunja's HTTP access log and any reverse-proxy logs when a user clicks the link. Attackers with re...

PT-2026-139793

Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string of emailed links, so the full request URI, including the token, is written to Vikunja's HTTP access log and any reverse-proxy logs when a user clicks the link. Attackers with re...

CVE-2026-123512: go-vikunja vikunja: Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string…

Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string of emailed links, so the full request URI, including the token, is written to Vikunja's HTTP access log and any reverse-proxy logs when a user clicks the link. Attackers with re...

cpx_proftpd

cpxproftpd PoC by Daniel Aldana for CVE-2015-3306 exploitation. Bug reported by Vadim Melihow. METHOD 1: usage: python cpxproftp.py ex: python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt then try: http://127.0.0.1/pass.txt METHOD 2: usage: python cpxproftp.py ex: python cpxproftp.py...

CVE-2021-40859

CVE-2021-40859 Auerswald VoIP System Secret Backdoors -PoC Tool usage: CVE-2021-40859.py http://target:port...

Oracle Strategic Network Optimization security vulnerability

A security vulnerability exists in Oracle Strategic Network Optimization versions 12.2.3 through 12.2.15. This vulnerability stems from issues related to the Installation of the SNO component, potentially allowing unauthenticated attackers to gain HTTP access and take control of Strategic Network...

Oracle Global Order Promising security vulnerability

A security vulnerability exists in Oracle Global Order Promising versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Web Service component, potentially allowing low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, ...

Oracle Product Hub security vulnerability

A security vulnerability exists in Oracle Product Hub versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain control of Oracle Product Hub via HTTP access, potentially affecting other products as...

Oracle WebCenter Content security vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow unauthenticated attackers to gain HTTP access, resulting in unauthorized access to critical data or full access to all...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Core component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can create, delete, or modify critical data or all...

Oracle SOA Suite security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle SOA Suite contain a security vulnerability stemming from issues in the Fabric Layer component. Low-privilege attackers can exploit this vulnerability via HTTP access, potentially leading to full compromise of Oracle SOA Suite...

Oracle SOA Suite security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle SOA Suite contain a security vulnerability stemming from issues in the Fabric Layer component. This vulnerability may allow unauthenticated attackers to gain HTTP access, thereby enabling unauthorized access to critical data or all accessible data...

Oracle Enterprise Manager for Siebel security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Siebel contain a security vulnerability stemming from issues in the Configuration Management component. This vulnerability may allow attackers with low privileges to gain HTTP access and take control of Oracle Enterprise Manager for Siebel...

Oracle HRMS (Republic of Korea) security vulnerabilities

A security vulnerability exists in Oracle HRMS Republic of Korea versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Korean Payroll component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical data or all accessible data without...

Oracle Quality security vulnerability

A security vulnerability exists in Oracle Quality versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to create, delete, or modify critical data via HTTP access, as well as gain unauthorized access to...

Oracle WebCenter Content security vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain a security vulnerability stemming from issues within the Content Portal Suite component. This vulnerability may allow attackers with limited privileges to gain HTTP access and take control of Oracle WebCenter Content...

Oracle Demand Planning security vulnerability

Versions 12.1 and 12.2 of Oracle Demand Planning contain a security vulnerability stemming from an issue in the Internal Operations component. This vulnerability may allow unauthenticated attackers to gain HTTP access via network interactions requiring user interaction. It affects other products,...

Oracle Siebel Apps - Field Service security vulnerability

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability stemming from issues in the Smart Answer component. This vulnerability may allow highly privileged attackers to gain HTTP access, potentially leading to a takeover of Oracle Siebel Apps – Field Service...

Oracle SOA Suite security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle SOA Suite contain a security vulnerability stemming from issues in the Fabric Layer component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, potentially resulting...