CVE-2026-100273: Incorrect Authorization

In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution...

PT-2026-103320

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.19197 Description An authorization bypass in the scripts debugger allows for arbitrary code execution. Recommendations Update to version 2026.2.19197...

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation 취약한 davfs2CVE-2013-4362를 사용하는 시스템을 자동으로 익스플로잇합니다. 무엇을 위한 것인가? 취약한 버전의 davfs2 익스플로잇을 단순화하는 두 개의 .sh 스크립트입니다. 사전 요구 사항 'fuse' 또는 'coda' 모듈 중 적어도 하나는 커널에 로드되어 있지 않아야 합니다 PoC는 기본적으로 로드되지 않는 coda로 동작합니다 원격 webdav 서버를 마운트할 수 있는 사용자여야 합니다 cat...

CVE-2026-69662 Toptech TMS7 and TopHAT Eval Injection

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions...

CVE-2026-69662 Toptech TMS7 and TopHAT Eval Injection

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions...

CVE-2026-69662

The Toptech TMS7 and TopHAT applications are vulnerable to an eval injection flaw due to the use of unsafe functions . These functions allow for the execution of inline scripts and string evaluation functions . While specific versions are not detailed in the provided text, a security strengthenin...

CVE-2026-102925

A flaw was found in virtualenv. The generated activation scripts for shells such as bash, zsh, and fish apply improper quoting to environment and library path variables. An attacker can exploit this by providing a crafted virtual environment path containing shell metacharacters. When an...

CVE-2026-102925

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate bash and zsh and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In the bash and zsh script, a crafted virtual environment path...

CVE-2026-102925 virtualenv bash and fish activation scripts execute commands embedded in paths

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate bash and zsh and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In the bash and zsh script, a crafted virtual environment path...

CVE-2026-102925 virtualenv bash and fish activation scripts execute commands embedded in paths

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate bash and zsh and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In the bash and zsh script, a crafted virtual environment path...

CVE-2026-102831

A flaw was found in JupyterLab. This vulnerability allows Cross-Site Scripting XSS when pasting notebook cells from the system clipboard, as the application fails to clear trusted metadata flags from imported cell data. A remote attacker could exploit this by enticing a user to paste malicious ce...

scarlgyx-cybersecurity

Scarlgyx Cybersecurity Writeups, notas y herramientas de cibe...

CVE-2026-93485

cve-id 기부 이 프로젝트 유지 관리에 도움을 주세요 이 프로젝트가 유용하다고 생각하신다면, PayPal 또는 ABA Mobile을 통해 지속적인 유지 관리를 후원해 주시기 바랍니다. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 모든 기부금의 10퍼센트는 Kantha Bopha 어린이 병원에 기부됩니다. | 결제 방법을 선택하세요 ABA Mobile로 스캔하세요 · 클릭하여 확대 ---|--- ⚡ 간단한 사용법 GitHub에서 직접...

CVE-2026-10795

CVE-2026-10795 기부 이 프로젝트 유지 관리에 도움 주기 이 프로젝트가 유용하다고 생각되신다면, PayPal 또는 ABA Mobile을 통한 지속적인 유지 관리 지원을 고려해 주시기 바랍니다. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 모든 기부금의 10%는 칸타 보파 어린이 병원에 기부됩니다. | 결제 방법 선택 ABA Mobile로 스캔 · 클릭하여 확대 ---|--- ⚡ 간단한 사용법 GitHub에서 최신 버전의 외부...

CVE-2026-26718

설명 요약 xxl-job-admin 웹 애플리케이션에는 공격자가 Glue IDE 셸 스크립트를 무단으로 수정할 수 있게 하는 CSRF사이트 간 요청 위조 취약점이 존재합니다. 영향을 받는 엔드포인트는 적절한 CSRF 토큰 검증이 없으며, 관대한 요청 매핑을 통해 임의의 HTTP 메서드를 허용합니다. 영향을 받는 제품 xxl-job history.pushState'', '', '/'; docu...

Ubiquiti-CVE

Ubiquiti-CVE ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 허가된 환경에서만 사용하십시오: 로컬 가상 머신 Docker 컨테이너 격리된 실험실 설정 허가된 침투 테스트 환경 예제 설정: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Git Bash ...

CVE-2026-84648

A flaw was found in Jenkins. The system log viewer does not properly escape log record metadata, such as the source, level, and timestamp. This vulnerability allows attackers who control agent processes to inject malicious scripts. Successful exploitation can lead to a stored cross-site scripting...

EUVD-2026-87976

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...

CVE-2026-57443 SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests

SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2 and prior to version 4.2.1, the AetherBrowser API server scripts/aetherbrowser/apiserver.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call thi...

PT-2026-98397

Name of the Vulnerable Software and Affected Versions Repeater Fields for Elementor Forms versions prior to 2.2.8 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into...