CVE-2026-19610

A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and configurations. The issue occurs because the handler for the read-resource operation on the runtime management resource fails to perform required Role-Based Access Control RBAC...

CVE-2025-24893

PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11 , 16.4.1 and 16.5.0RC1. ⚠️ IMPORTANT — AUTHORIZED TESTING ONLY This repository contains a proof-of-concept PoC project intended for educational...

Security Bulletin: Platform Navigator and Automation Assets in IBM Integration are vulnerable to a vulnerability in source-map-js

Summary Platform Navigator and Automation Assets in IBM Integration are vulnerable to a vulnerability in source-map-js. CVE-2026-93749 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-93749 DESCRIPTION: source-map-js through 1.2.1 fails to validate the per-section offset...

CVE-2018-13797

node-macaddress Retrieve MAC addresses in Linux, OS X, and Windows. A common misconception about MAC addresses is that every host had one MAC address, while a host may have multiple MAC addresses – since every network interface may have its own MAC address. This library allows to discover the MAC...

ROOT-APP-NPM-CVE-2026-75604 CVE-2026-75604 in next - Patched by Root

Root has patched CVE-2026-75604 in the next package for Root:npm. Multiple fixed versions available...

CVE-2026-118477 KaliFast Project Management Platform ei_git_repo_url OS Command Injection

The eigitrepourl parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authenticated attacker free registration available to execute arbitrary commands on the KaliFast server with www-data privileges...

CVE-2026-118477

The KaliFast Project Management Platform is vulnerable to OS Command Injection via the ei_git_repo_url parameter in the Git remote configuration endpoint. An authenticated attacker (with free registration available) can exploit this flaw to execute arbitrary commands on the server with www-data p...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16 CNF IBU extras update

An update for ibu components is available for Red Hat OpenShift Container Platform 4.16. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the extra ibu container...

pupy

Pupy Simple Installation pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install git clone https://github.com/n1nj4sec/pupy cd pupy git checkout nextgen git submodule init git...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14 CNF IBU extras update

An update for ibu components is available for Red Hat OpenShift Container Platform 4.14. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the extra ibu container...

CVE-2026-16020

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fazile BACAK DefterAsist Financial Advisor Platform allows Stored XSS. This issue affects DefterAsist Financial Advisor Platform: through 2026-10-27...

CVE-2026-16020 Stored XSS Fazile BACAK's DefterAsist Financial Advisor Platform

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fazile BACAK DefterAsist Financial Advisor Platform allows Stored XSS. This issue affects DefterAsist Financial Advisor Platform: through 2026-10-27...

CVE-2026-16020

The Fazile BACAK DefterAsist Financial Advisor Platform is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This issue affects versions of the platform through 2026-10-27 . The vulnerability allows an attacker to inject mal...

EUVD-2026-111826

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fazile BACAK DefterAsist Financial Advisor Platform allows Stored XSS. This issue affects DefterAsist Financial Advisor Platform: through 2026-10-27...

WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Hung Bach Ngoc - VinSOC @tomchuoi in WordPress Plugin Buddyboss Platform versions = 3.5.0...

gophoner

gophoner​​ Check simultaneously if a phone number is registered on popular apps & websites, without any prerequisite. Please star & share this repository if you find it useful ⭐ Table of Contents Disclaimer Features Installation Usage Supported Modules Roadmap Legal & Ethical Use License Credits...

SAP Memory Pipes (MPI) Desynchronization

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable to request smuggling and request concatenation attacks. An unauthenticated attacker can prepend a victim's request with arbitrary data. This...

Barco/AWIND OEM Presentation Platform - Remote Command Injection

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...

Oracle Business Intelligence Publisher (October 2026 CPU)

The 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI...

PT-2026-127901

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fazile BACAK DefterAsist Financial Advisor Platform allows Stored XSS. This issue affects DefterAsist Financial Advisor Platform: through 2026-10-27...