CVE-2026-88897

Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST API routes. Attackers with access to web server, proxy, or monitoring logs can recover valid API token pairs that grant full API access...

Excelize: Negative shared-string index causes panic in GetCellValue and GetRows

Negative shared-string index causes panic in GetCellValue and GetRows Summary Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice. If an XLSX file contains a shared-string cell with -1, the parsed index is negative. T...

cve-2026-25994_PJSIP

CVE-2026-25994 – Desbordamiento de búfer en la pila del ICE Stack de PJNATH pjsip ≤ 2.16 Resumen CVE-2026-25994 es una vulnerabilidad de desbordamiento de búfer basado en pila que afecta a la implementación de ICE Interactive Connectivity Establishment en pjsip ≤ 2.16, específicamente dentro del...

EUVD-2026-75542

Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST API routes. Attackers with access to web server, proxy, or monitoring logs can recover valid API token pairs that grant full API access...

CVE-2026-88897 Flextype CMS through 1.0.0-alpha.3 API Token Exposure via Query String

Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST API routes. Attackers with access to web server, proxy, or monitoring logs can recover valid API token pairs that grant full API access...

CVE-2026-88897 Flextype CMS through 1.0.0-alpha.3 API Token Exposure via Query String

Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST API routes. Attackers with access to web server, proxy, or monitoring logs can recover valid API token pairs that grant full API access...

CVE-2026-88897

Flextype CMS versions up to 1.0.0-alpha.3 transmit API authentication credentials via URL query string parameters in REST API routes. Because query strings are commonly logged, an attacker with access to web server, proxy, or monitoring logs can recover valid API token pairs that grant full API a...

CVE-2025-9223

Applications Manager - Execute Program Action Bypass PoC 📖 Descripción Este repositorio contiene una Prueba de Concepto PoC que demuestra una vulnerabilidad de ejecución de comandos en la función "Execute Program Action" de ManageEngine Applications Manager. 🔍 Detalles de la Vulnerabilidad...

CVE-2019-7711

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS Information Leak 📌 Repositorio de documentación técnica y recursos sobre la vulnerabilidad de Format String en el servidor Telnet de Green Hills INTEGRITY RTOS v5.0.4. 📖 Descripción General La vulnerabilidad afecta al servidor IPCOMShell Telnet de...

huntglyph

huntglyph — Detecta ataques homógrafos Los ataques homógrafos aprovechan la similitud visual de caracteres de diferentes sistemas de escritura p. ej., la 'a' latina frente a la 'а' cirílica para suplantar nombres de dominio, nombres de archivo u otros identificadores, engañando a los usuarios par...

CVE-2026-42804

A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPIC-Library in versions up to and including commit d6b200416a. The vulnerability is located within the FIFO parsing and debug logging subsystem inside the function bhi360parsedebugmessage in bhi360parse.c line...

EUVD-2026-75329

A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPIC-Library in versions up to and including commit d6b200416a. The vulnerability is located within the FIFO parsing and debug logging subsystem inside the function bhi360parsedebugmessage in bhi360parse.c line...

CVE-2026-42804

A stack-based buffer overflow exists in the Bosch Sensortec BHI360 SensorAPI (C-Library) , affecting versions up to and including commit d6b200416a. The flaw is in bhi360_parse_debug_message() (bhi360_parse.c, lines 1852–1875), where the first payload byte of a debug frame is used as a length and...

CVE-2026-42804

A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPIC-Library in versions up to and including commit d6b200416a. The vulnerability is located within the FIFO parsing and debug logging subsystem inside the function bhi360parsedebugmessage in bhi360parse.c line...

CVE-2026-33980

CVE-2026-33980 — KQL Injection in adx-mcp-server via tablename parameter Severity : High CVSS 8.3 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : adx-mcp-server = 1.1.0 Advisory : GHSA-vphc-468g-8rfp NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-33980...

CVE-2026-21717

CVE-2026-21717 Node.js V8 String Hashing Predictable Collision Vulnerability Leading to Denial of Service Overview A critical vulnerability in V8's string hashing mechanism allows attackers to cause severe performance degradation in Node.js applications. Integer-like strings are hashed to their...

CVE-2026-3008

CVE-2026-3008 — Notepad++ 8.9.3 の nativeLang.xml を介したフォーマット文字列インジェクション 脆弱性 検索操作が結果を生成すると、sub1400916C0 は nativeLang.xml からローカライズされた文字列を取得し、それをそのまま wsprintfW のフォーマット文字列として渡すことで、ヒット数ラベルをフォーマットします: root@kitploit: sub140099E60v37, v51, unsigned int a1 + 196; // ローカライズされた文字列を取得 v38 = const WCHAR v51; i...

nanwinata-CVE-2024-52301

This script using simple tools subfinder,httpx. Laravel is a web application framework. When the registerargcargv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The...

CVE-2026-32223-USBPrint-Exploit

CVE-2026-32223: Plug me If you can : Exploiting USB Printer Drivers in Windows Heap-based buffer overflow in Windows USB Print Driver usbprint.sys leading to Local Privilege Escalation LPE This vulnerability was discovered and reported by ENKI WhiteHat. Overview CVE-2026-32223 is a heap-based...

CVE-2023-38646

CVE-2023-38646 CVE-2023-38646 Metabase 0.46.6 exploit This tool exploits a vulnerability CVE-2023-38646 in a software platform. The exploit allows for remote code execution via a crafted request, leveraging a mishandled database connection string. Overview The tool: Fetches the setup token from t...