481324 matches found
CVE-2026-32247
CVE-2026-32247 β Cypher Injection in graphiti-core via unsanitized nodelabels Severity : High CVSS 8.1 CWE : CWE-943 β Improper Neutralization of Special Elements in Data Query Logic Affected : graphiti-core = 0.28.1 pip Fixed in : 0.28.2 Advisory : GHSA NVD :...
CVE-2026-25130-Cybersecurity-AI-CAI-Framework-0.5.10
CVE-2026-25130 β Cybersecurity AI CAI Framework Argument Injection / OS Command Injection PoC Author: Mohammed Idrees Banyamer Country: Jordan GitHub: https://github.com/yourusername Instagram: @banyamersecurity Overview This repository contains a Proof of Concept PoC demonstrating an argument...
CVE-2026-2413-POC
CVE-2026-2413-POC The Ally β Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user-supplied URL parameter in the getglobalremediations method, where it is...
CVE-2026-84379
HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.renderheaders in src/httpx2/httpx2/multipart.py directly interpolates attacker-controlled contenttype values and custom headers from the files= three-element filename, content, contenttype tuple and the files=...
CVE-2026-82522
libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...
CVE-2026-66786
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...
cve-2025-59489
Unity CVE-2025-59489 Vulnerability Detection Tool An automated detection tool for Unity Runtime injection vulnerabilities, specifically designed for Android game platforms. Vulnerability Overview CVE ID : CVE-2025-59489 CVSS Score : 8.4 High Affected Scope : Android applications built with Unity...
electroniz3r
electroniz3r Toma el control de los permisos de TCC de las aplicaciones Electron de macOS con electroniz3r. La herramienta se presentΓ³ por primera vez en DEFCON31 en Las Vegas durante mi charla ELECTRONizing macOS privacy - a new weapon in your red teaming armory. DescripciΓ³n general root@kitploi...
POC-CVE-2026-63030-CVE-2026-60137-
PoC: WP2Shell β CVE-2026-63030 & CVE-2026-60137 -red?style=for-the-badge π Overview WP2Shell is a critical exploit chain in WordPress Core source code that allows a remote unauthenticated attacker to gain full control of the server Full Server Takeover / RCE. The exploit chain combines two securi...
grav-cve-2024-28116
CVE-2024-28116 β SSTI with Sandbox Bypass in Grav CMS Analysis and Docker reproduction of CVE-2024-28116, a Server-Side Template Injection vulnerability with security sandbox bypass in Grav CMS versions up to and including 1.7.44, fixed in version 1.7.45. Reported by: Maurizio Siddu akabe1 CVSS...
EUVD-2026-70247
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...
CVE-2026-66786
Submariner 's certificate-based IPsec authentication mode (IPSecCertAuthMode: true) is vulnerable to ipsec.conf stanza injection via remote-supplied CableName and subnets fields in the Custom Resource Definition. Because these free-form strings are incorporated into the connection configuration w...
CVE-2026-66786 Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...
CVE-2026-84379 HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers
HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.renderheaders in src/httpx2/httpx2/multipart.py directly interpolates attacker-controlled contenttype values and custom headers from the files= three-element filename, content, contenttype tuple and the files=...
CVE-2026-84379 HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers
HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.renderheaders in src/httpx2/httpx2/multipart.py directly interpolates attacker-controlled contenttype values and custom headers from the files= three-element filename, content, contenttype tuple and the files=...
CVE-2026-84379
HTTPX2 , a next-generation HTTP client for Python, is affected by a multipart part header injection vulnerability in FileField.render_headers() within src/httpx2/httpx2/_multipart.py. Prior to 2.11.0 , attacker-controlled content_type values and custom headers from files= tuples are interpolated ...
EUVD-2026-70246
HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.renderheaders in src/httpx2/httpx2/multipart.py directly interpolates attacker-controlled contenttype values and custom headers from the files= three-element filename, content, contenttype tuple and the files=...
cpanel-malware-cleaner-cve-2026
cPanel malware, CVE-2026-41940, virus removal π¨ cPanel Malware Cleaner β CVE-2026-41940 Fix Tool A lightweight and powerful security tool to detect, remove, and prevent malware infections caused by recent cPanel vulnerabilities including CVE-2026-41940. π₯ Features Detects and removes malware,...
Exploit for OS Command Injection in Vsftpd_Project Vsftpd
vsFTPd 2.3.4 Exploit Python Proof of Concept for the vsFTPd...
EUVD-2026-70241
libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...