CVE-2026-92128

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the first download and loading the classpath entries from the second, allowing attackers able to define classpath entries to execute arbitrary code in the context ...

CVE-2026-92127

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier automatically approves the classpath entries in an item configuration when a user with Overall/Administer permission copies the item, or updates that configuration through the REST API or CLI, allowing attackers able to define classpat...

CVE-2026-92128

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the first download and loading the classpath entries from the second, allowing attackers able to define classpath entries to execute arbitrary code in the context ...

CVE-2026-92128

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) is vulnerable to a TOCTOU (Time-of-Check to Time-of-Use) race condition. The plugin downloads a JAR file specified by a URL twice during script evaluation: it confirms the approval of the first download but loads the c...

CVE-2026-92127

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) is vulnerable to an improper control of generation of code. The flaw allows the plugin to automatically approve classpath entries in an item configuration when a user with Overall/Administer permission copies the item ...

EUVD-2026-80749

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier does not reject the @GroovyASTTransformationClass annotation, allowing attackers with permission to define and run sandboxed scripts, including Pipelines, to run an arbitrary AST transformation at compile time, bypassing the sandbox...

CVE-2026-92125

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) is vulnerable to a sandbox bypass because it fails to reject the @GroovyASTTransformationClass annotation. An attacker with permissions to define and run sandboxed scripts, such as Pipelines , can use this annotation t...

CVE-2026-92124

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script casts to another type but performs the cast on the collection itself, allowing attackers with permission to define and run...

CVE-2026-92123

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier does not intercept operations performed on a null receiver method calls, property and attribute accesses, and array accesses, allowing attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the...

CVE-2026-92122

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier does not check the method called through the proxy created when a sandboxed script coerces a value to an interface, if the value inherits a method of the same name as an interface method, allowing attackers with permission to define an...

Vulnerabilities in Oracle Fusion Middleware

Oracle has identified 153 vulnerabilities in various Oracle Fusion Middleware products, including Helidon, Oracle Access Manager, Oracle Coherence, Oracle Data Integrator, Oracle Forms, Oracle Fusion Middleware Control, Oracle Identity Manager, Oracle Identity Manager Connector, Oracle Internet...

EUVD-2026-80735

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

libevent: Libevent: Arbitrary code execution via heap out-of-bounds write in AF_UNIX handling

A flaw was found in Libevent. A heap out-of-bounds write vulnerability in the buffereventsocketsetconnaddress function allows an unauthenticated local peer to achieve arbitrary code execution. By connecting to an AFUNIX listener, an attacker can overwrite critical heap data, leading to memory...

Important: Red Hat Security Advisory: libevent security update

An update for libevent is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

MariaDB-13.0.1-rc-RCE-PoC-Exploit

MariaDB 13.0.1-rc RCE — PoC / Exploit hardened fork Fork of...

vapt-writeups

VAPT Writeups Hands-on Vulnerability Assessment & Penetration...

CVE-2026-58147 Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application improperly neutralizes special elements in the httppasswdhidden and httppasswdConfirmhidden parameters, allowing an authenticated attacker to...

CVE-2026-58147 Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application improperly neutralizes special elements in the httppasswdhidden and httppasswdConfirmhidden parameters, allowing an authenticated attacker to...

CVE-2026-58146 Unauthorized remote code execution in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the clicookie POST parameter. The clicookie parameter value is directly concatenated into a find command string without proper...

CVE-2026-58146 Unauthorized remote code execution in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the clicookie POST parameter. The clicookie parameter value is directly concatenated into a find command string without proper...