cve-2019-13720

cve-2019-13720 CVE-2019-13720 Exploit Tools 05 Nov 2019: Release POC: https://www.youtube.com/watch?v=0HdRJImwYww 06 Nov 2019: Release Tool. [email protected]...

BLACKHAT_Asia2023

BLACKHATAsia2023 Just About BLACKHAT USA2022 PDF Public File List, Search what your intersting. BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf ├──...

CVE-2023-5070

creationtimestamp| type| source ---|---|--- 2026-09-05 18:00:05+00:00| published-proof-of-concept| Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85WwIzNKkpSTY 2026-09-06 00:00:39+00:00| published-proof-of-concept| Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85WwIzNKkpSTY...

PT-2026-67500

Name of the Vulnerable Software and Affected Versions danpros HTMLy versions prior to 3.1.2 Description A path traversal flaw exists in the Admin Content Endpoint component. A remote attacker can manipulate the oldfile argument within the add content function located in the /system/admin/admin.ph...

CVE-2026-15749

A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function execute of the file src/tools/get-c2d.ts of the component mcpC2d. Performing a manipulation of the argument filePath results in path traversal. The attack requires a local...

PT-2026-58101

A security flaw has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the function ExtractFile of the file include/zip.class.php of the component Album Publishing Feature. The manipulation of the argument filename results in path traversal. The attack can be executed remotely...

EUVD-2026-42492

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /editfooditems.php. The manipulation of the argument update results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the publ...

PT-2026-56812

Name of the Vulnerable Software and Affected Versions enquirer versions prior to 2.4.2 Description A flaw in the Public Package API component allows remote attackers to perform prototype pollution. By manipulating the question.name argument within the Enquirer.set function, an attacker can cause...

EUVD-2026-41810

A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. Impacted is an unknown function of the file /customer/myaccount.php?mywishlist. The manipulation of the argument deletewishlist results in sql injection. The attack can be launched remotely. The exploit has been released to t...

EUVD-2026-40028

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /department.php. The manipulation of the argument editid results in sql injection. The attack may be performed from remote. The exploit has been released to the public a...

Anthropic Offers Mythos Upgrade for Cyber Partners and a ‘Safe’ Version for the Rest of You

Anthropic is releasing Claude Mythos 5 to trusted organizations and Claude Fable 5 to the public, a version it says can’t be used for cyberattacks...

PT-2026-47273

A security flaw has been discovered in CodeAstro Leave Management System 1.0. This affects an unknown part of the file /admin/add leave.php. Performing a manipulation of the argument type of leave results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-7788

A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The affected element is the function updatedocument/continuedocument/deletedocument/getcontent of the file app/routes/document.py. Performing a manipulation of the argument DOCSDIR/pa...

EUVD-2026-34056

A security flaw has been discovered in wonderwhy-er DesktopCommanderMCP up to 0.2.38. This impacts an unknown function of the file src/search-manager.ts of the component startsearch. Performing a manipulation of the argument SearchResult results in inefficient regular expression complexity. It is...

EUVD-2026-33625

A security flaw has been discovered in itsourcecode Online Blood Bank Management System 1.0. The affected element is an unknown function of the file /admin/campsdetails.php. Performing a manipulation of the argument hospital results in sql injection. The attack is possible to be carried out...

UBUNTU-CVE-2026-10231

A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::extractanimvalue of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Performing a manipulation of the argument num.total results in heap-based buffer overflow. The attack must be...

Blind Spots in the Guard: How Domain-Camouflaged Injection Attacks Evade Detection in Multi-Agent LLM Systems

Injection detectors deployed to protect LLM agents are calibrated on static, template-based payloads that announce themselves as override directives. We identify a systematic blind spot: when payloads are generated to mimic the domain vocabulary and authority structures of the target document, wh...

CVE-2026-44172

Disclaimer: This data contains information about vulnerable...

Mini Shai-Hulud: The Worm Returns and Goes Public

...

CVE-2026-8254 Devs Palace ERP Online sales_save cross site scripting

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functionality of the file /inventory/salessave. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the...