DEBIAN-CVE-2026-59786

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

UBUNTU-CVE-2026-59786

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

EUVD-2026-92398

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

Exploit for CVE-2026-95622

CVE-2026-95622: ModemManager CBM Assertion Failure DoS A deni...

CVE-2026-88395: Improper Neutralization of Special Elements used in an SQL Command

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

PT-2026-104804

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulting in a loss of integrity...

CVE-2026-88395

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

CVE-2026-88395

The software GouGuOA version v6.0.5 and before is vulnerable to an SQL Injection flaw located in the /home/message/rubbish endpoint. The vulnerability is triggered via the keywords parameter , which fails to properly neutralize special elements used in SQL commands (CWE-89). This flaw could allow...

EUVD-2026-92469

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

PT-2026-106006

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

PT-2026-106136

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.0.0 through 2.3.37 Apache Struts versions 2.5.0 through 2.5.33 Apache Struts versions 6.0.0 through 6.11.0 Apache Struts versions 7.0.0 through 7.3.0 Description A race condition occurs when a localized message formats...

CVE-2026-88395

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

mav-raiders

MAV Raiders Security Analysis and Exploitation of MAVLink-B...

wordpress-stored-xss-privilege-escalation-admin-creation

WordPress Stored XSS - Escalacion de Privilegios y Creacion de...

CVE-2026-105116

OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRedirectEnabled set, crafted requests could execute script in the OpenAM origin,...

Missing Authentication for Critical Function

Overview ait-core is a NASA JPL's Ground Data System toolkit for Instrument and CubeSat Missions Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication on the ZeroMQ message bus. An attacker can inject unauthorized comman...

EUVD-2026-92020

OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRedirectEnabled set, crafted requests could execute script in the OpenAM origin,...

CVE-2026-105105

The NASA-AMMOS AIT-Core (versions through 3.1.1 ) is vulnerable to CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server ). The underlying cause is that the ZeroMQ broker binds its XSUB and XPUB sockets to all network interfaces by d...

Incorrect Comparison

Overview Affected versions of this package are vulnerable to Incorrect Comparison through the JceKeyTransRecipient key transport path in pkix/src/main/java/org/bouncycastle/cms/jcajce/JceKeyTransRecipient.java. An attacker can bypass the opt-in key-size check and have an EnvelopedData or...

CVE-2026-85515

In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integrity check performed at all. RFC 9580 sec. 13.7 permits an implementation to release the cleartext of the fully authenticated chunks when...