CVE-2026-42512: Heap-based Buffer Overflow

As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers. The code which expands the array incorrectly calculates its new size when requesting memory, resulting in a heap buffer overrun. A specially crafted packet can cause dhclient to...

exploit-db-skill

Exploit-DB Skill Cross-Platform Small cross-platform helper...

GHSA-537J-GQPC-P7FQ n8n Vulnerable to XSS via MCP OAuth client

Impact An unauthenticated attacker could register a malicious MCP OAuth client with a crafted clientname. If a victim user authorized the OAuth consent dialog and a second user subsequently revoked that access, a toast notification would render the injected script. Clicking the link would execute...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload. A malicious actor compromised the package, enabling the attacker to publish tampered versions of the deep learning framework. Malicious Behavior The execution chain ru...

Embedded Malicious Code

Overview intercom/intercom-php is an Intercom API client. Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload. A malicious actor compromised the package, enabling the attacker to publish tampered versions of the deep learning...

Embedded Malicious Code

Overview lightning is a Deep Learning framework to train, deploy, and ship AI products Lightning fast. Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload. A malicious actor compromised the package, enabling the attacker to publi...

Exploit for Out-of-bounds Write in Microsoft

CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBSc...

EUVD-2018-21830

MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines. Attackers can create threads with script tags in the subject parameter to execute arbitrary JavaScript in the browser...

CVE-2025-56534

A cross-site scripting XSS vulnerability in the custom authenticator driver of opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

UBUNTU-CVE-2025-56536

A stored cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the user information parameter...

CVE-2026-40230

Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist arbitrary HTML or JavaScript in the body field of a knowledge base Doc.This issue affects helpy: 2.8.0...

GHSA-P334-GFHQ-C7W6 Jenkins Script Security Plugin: Missing permission checks allow enumeration of pending and approved classpaths

Jenkins Script Security Plugin versions 1399.ve6a66547f6e1 and earlier do not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to enumerate pending and approved Script Security classpaths. Script Security Plugin 1402.v94c9ce464861 requires...

Jenkins Script Security Plugin: Missing permission checks allow enumeration of pending and approved classpaths

Jenkins Script Security Plugin versions 1399.ve6a66547f6e1 and earlier do not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to enumerate pending and approved Script Security classpaths. Script Security Plugin 1402.v94c9ce464861 requires...

io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:nested-data-reporting (5.2.1) +1 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1228.vd93135a_2fb_25)

org.jenkins-ci.plugins:script-security MAVEN version 1228.vd93135a2fb25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

org.jenkins-ci.plugins.workflow:workflow-cps (>=3697.3699.v9cfca_8c0db_0c, <=3774.v4a_d648d409ce), org.jenkins-ci.plugins:command-launcher (>=100.102.v60240195db_50, <=107.v773860566e2e) potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1265.va_fb_290b_4b_d34)

org.jenkins-ci.plugins:script-security MAVEN version 1265.vafb290b4bd34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =3697.3699.v9cfca8c0db0c,...

io.jenkins.plugins:cdevents (>=1-37.v6412b_91c3799, <=1-40.vb_3d2c94f2379), io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=34.v570d1a_452f30) +4 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1273.v66c1964f0dfd)

org.jenkins-ci.plugins:script-security MAVEN version 1273.v66c1964f0dfd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:cdevents =1-37.v6412b91c3799, =20.v2cb6cc0a7d81,...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.54.0), io.jenkins.blueocean:blueocean (>=1.27.17, <=1.27.18) +28 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1275.v23895f409fb_d)

org.jenkins-ci.plugins:script-security MAVEN version 1275.v23895f409fbd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.amadeus.jenkins.plugins:workflow-cps-global-lib-http =2.33.0,...

org.jenkins-ci.plugins:webhook-step (327.vb_58f208a_7783) potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1281.v22fb_899df1a_e)

org.jenkins-ci.plugins:script-security MAVEN version 1281.v22fb899df1ae is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:webhook-step 327.vb58f208a7783 Source cves:...

io.jenkins.plugins:coverage-badges-extension (>=-rc6.886d29ff0f4d, <=47.v41e62ecf0928), jp.ikedam.jenkins.plugins:scoring-load-balancer (>=68.va_4591100d6a_b, <=97.v8e470ff53e15) +9 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1294.v99333c047434)

org.jenkins-ci.plugins:script-security MAVEN version 1294.v99333c047434 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:coverage-badges-extension =-rc6.886d29ff0f4d,...

io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.27.12, <=1.27.16), io.jenkins.plugins:coverage (>=1.11.0, <=1.16.1) +6 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1305.v487433146192)

org.jenkins-ci.plugins:script-security MAVEN version 1305.v487433146192 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean-pipeline-scm-api =1.27.12, =1.11.0,...