CVE-2026-104082

SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-directory containment control by provisioning a new mail domain with an arbitrary FileStore root path inside the trusted...

CVE-2026-104082 SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount

SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-directory containment control by provisioning a new mail domain with an arbitrary FileStore root path inside the trusted...

EUVD-2026-95887

SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-directory containment control by provisioning a new mail domain with an arbitrary FileStore root path inside the trusted...

CVE-2026-104082

SmarterMail before Build 9777 is vulnerable to Remote Code Execution (RCE) due to a bypass of the Volume Mount script-directory containment control . An attacker with a SysAdmin-scoped access token can provision a new mail domain via the domain-put endpoint, setting an arbitrary FileStore root pa...

PT-2026-108764

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the BPF subsystem. The bpf link prime function inserts a link into link idr before anon inode getfile succeeds and before bpf link settle publishes...

PT-2026-108953

Name of the Vulnerable Software and Affected Versions SmarterMail versions prior to build 9777 Description A remote code execution issue exists where an attacker with a SysAdmin-scoped access token can bypass Volume Mount script-directory containment. This is achieved by provisioning a new mail...

CVE-2026-104082: Improper Control of Generation of Code

SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-directory containment control by provisioning a new mail domain with an arbitrary FileStore root path inside the trusted...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq

ActiveMQ Fileserver Arbitrary File Write CVE-2016-3088 Vul...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat

Tomcat PUT Arbitrary File Write CVE-2017-12615 Vulhubhtt...

CLEANSTART-2026-BT10409 undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe ...

CVE-2026-85008 affects multiple packages. undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never placed in the...

PT-2026-106673

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the dmaengine component where a device kref underflow occurs in the dma chan put function. The dma chan get function only increments the chan-device-ref on the slow path,...

PT-2026-106546

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A use-after-free issue exists in the IB/mlx4 component. The register pkey tree function ignores errors returned by register one pkey tree and proceeds to register remaining slaves. Because...

PT-2026-106564

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/sched: act api component where a batched RTM DELACTION request fails to release temporary references on actions if a deletion failure occurs. Specifically, whe...

CVE-2026-105761 Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

CVE-2026-105761 Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

CVE-2026-105761 Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

CVE-2026-105761

The open-source LLM app development platform Dify contains an Insecure Direct Object Reference (IDOR) vulnerability in versions prior to 1.16.0 . The root cause is located in api/controllers/console/app/mcp_server.py, where the PUT /console/api/apps//server endpoint uses AppMCPServerController.pu...

EUVD-2026-92852

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: aoss: The refcount leak in qmpcoolingdevicesregister has been fixed. In every iteration of foreachavailablechildofnode, the reference count of the previous node is decremented. When exiting the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ptp: A possible memory leak has been fixed in ptpclockregister. I encountered a memory leak during the fault injection test as follows: Unreferenced object: 0xffff88800906c618 size 8 Command: comm "i2c-idt82p33931", PID 4421,...