CVE-2026-54746 Hatchet: Cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a request's worker ID belongs to the tenant identified by the bearer-token context in Dispatcher/UpsertWorkerLabels and...

EUVD-2026-67791

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a request's worker ID belongs to the tenant identified by the bearer-token context in Dispatcher/UpsertWorkerLabels and...

CVE-2026-23918

CVE-2026-23918: Apache HTTP/2 Double-Free DoS CVE-2026-23918 | Apache HTTP Server 2.4.66 | CWE-415: Double Free | CVSS 8.8 | Behoben in 2.4.67 Eine Double-Free-Schwachstelle in modhttp2 h2mplx.c ermöglicht es entfernten Angreifern, über schnelle RSTSTREAM-Frames einen Denial of Service Absturz de...

CVE-2026-24417

CVE-2026-24417: OpenSTAManager tem uma Injeção de SQL Cega Baseada em Tempo com Negação de Serviço Amplificada Visão Geral...

CVE-2026-5201

CVE-2026-5201 Overflow del buffer basato su heap nel caricatore JPEG di gdk-pixbuf Ciao, sono Kağan Çapar. Ho scoperto una vulnerabilità di overflow del buffer basato su heap nel caricatore di immagini JPEG di gdk-pixbuf che colpisce praticamente tutti gli ambienti desktop Linux. Alla vulnerabili...

CVE-2026-21986-VirtualBox-DoS

CVE-2026-21986 - Esaurimento della memoria kernel delle cartelle condivise di VirtualBox DoS Panoramica Questa repository contiene una proof of concept e una documentazione tecnica per CVE-2026-21986, una vulnerabilità di denial-of-service in Oracle VM VirtualBox. Il problema risiede...

CVE-2026-26903-PoC

CVE-2026-26903 PoC Denial-of-service tramite ricorsione illimitata nella funzionereplaceEqualDeep di TanStack Query Un singolo aggiornamento di query appositamente progettato con oggetti profondamente annidati può congelare il thread JavaScript a tempo indeterminato , causando la completa mancata...

cantina

ARCHIVED. This project moved tocustom-oscp-tooling. All Cantina code lives on there now, alongside the Star Wars enum/advisor tool suite. This repo is kept read-only for history. New home: https://gitlab.com/WattoCyber/custom-oscp-tooling Run: python tools/cantina.py from that repo Cantina At a...

EUVD-2026-67788

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The webloginfirstpost handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the websysenablePasswdpost handler...

CVE-2026-77218

PLANET GS-4210-16P2S firmware before 3.441b260626 is affected by three authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The web_login_first_post, web_sys_enablePasswd_post, and web_sys_localUser_post handlers each copy POST parameters (usrPass, enbPass, usrName) int...

CVE-2026-77218 PLANET GS-4210-16P2S Stack Buffer Overflow via dispatcher.cgi Credential Handlers

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The webloginfirstpost handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the websysenablePasswdpost handler...

CVE-2026-77217

PLANET GS-4210-16P2S firmware prior to 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The web_radiusSrv*_post handlers copy the radKey , radKey_0 , radDftParamKey , radName , and radIp POST parameters into fixed-s...

EUVD-2026-67787

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The webradiusSrvpost family of handlers copies the radKey, radKey0, radDftParamKey, radName, and radIp POST parameters into...

CVE-2026-75126 PLANET GS-4210-16P2S Stack Buffer Overflow via dispatcher.cgi Standard Handlers

PLANET GS-4210-16P2S firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy attacker-controlled POST parameters into fixed-size stack buffers without length validation:...

CVE-2026-75126

PLANET GS-4210-16P2S firmware prior to 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi . Numerous standard handlers (covering VLAN, PoE, SNMPv3, ACL, STP, TAC+, DHCP, and other functions) copy attacker-controlled POST parameters into f...

EUVD-2026-67786

PLANET GS-4210-16P2S firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy attacker-controlled POST parameters into fixed-size stack buffers without length validation:...

PoC-CVE-2025-69421

Riproduttore solo crash CVE-2025-69421 Questo repository contiene un file PKCS12 malformato minimale che riproduce la CVE-2025-69421 in un ambiente di laboratorio isolato. Il PFX generato contiene un EncryptedData il cui EncryptedContentInfo omette il campo opzionale encryptedContent. Le versioni...

CVE-2026-75125 PLANET GS-4210-16P2S Null Pointer Dereference DoS via dispatcher.cgi web_poe_alive_rmtip_post

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted reque...

CVE-2026-75125

PLANET GS-4210-16P2S managed PoE switches running firmware before 3.441b260626 are affected by an authenticated null pointer dereference in /cgi-bin/dispatcher.cgi. Specifically, the web_poe_alive_rmtip_post handler dereferences the rmtIP parameter without checking for its presence. A remote auth...

EUVD-2026-67785

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted reque...