PHP Login System 2.0.1 - Cross-Site Scripting

msaad1999's PHP-Login-System 2.0.1 contains a reflected cross-site scripting caused by unsanitized input in 'validator' parameter in /reset-password, letting remote attackers execute arbitrary JavaScript in a user's browser, exploit requires attacker to craft malicious URL id: CVE-2023-38875 info...

Security Bulletin: Vulnerabilities in spring-context, logback-core and Another JSON Schema Validator might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in spring-context, logback-core and Another JSON Schema Validator. Vulnerabilities include VMware Tanzu Spring Framework could provide weaker than expected security, caused by a flaw related to disallowedFields...

CVE-2017-16995

Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white-hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, assigned CVE-2017-16995. This...

cosmicsting-validator

A Cosmicsting POC, with a bash script to check all of our hosted sites to confirm the patch. This repository is provided to allow store owners / hosts to confirm the patch is applied on stores. Within check.bash add domains to the SITES list. https://www.sdj.pw/posts/magento2-cosmic-sting-check/...

CVE-2026-0915-json-Patch.-V2.0

CVE-2026-0915-json-Patch.-V2.0 Patch the Bug - glibc 🔒 JSON Validator Security Patch Enterprise-grade solution for CVE-2026-0915 - Protects against insecure JSON parsing through strict schema validation. 🚨 Security Notice This patch fixes CVE-2026-0915 - a critical vulnerability in JSON parsing...

CVE-2025-12758

CVE-2025-12758: Validator.js isLength Unicode Variation Selector Bypass CVE ID: CVE-2025-12758 CVSS Score: 8.7 HIGH Severity: HIGH CWE: CWE-792 Incomplete Filtering of One or More Instances of Special Elements Published: November 26, 2025 Disclosed: October 19, 2025 Vulnerability Overview This...

FORT-validator

FORT Validator An RPKI Relying Party and RTR Server. Documentation Home Installation Usage Arguments Docker image See the docker/ directory...

secure-headers-project

Introduction 📦 This repository contains all the content of the OWASP Secure Headers Project also named OSHP. OSHP Web URL ℹ️ The url https://owasp.org/www-project-secure-headers redirect to the project page on the OWASP site. Project page on the OWASP site:...

SUSE CVE-2026-119428

phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound connections via setup/validate.php, which lacks the setup-disabled guard. Attackers can POST attacker-chosen host and port values reaching...

hibernate__hibernate-validator_CVE-2019-10219_6_0_18_Final_fixed

Hibernate Validator Version: 6.0.18.Final - 25-10-2019 What is it? This is the reference implementation of JSR-380 - Bean Validation 2.0. Bean Validation defines a metadata model and API for JavaBean as well as method validation. The default metadata source are annotations, with the ability to...

ActiveMQ-CVE-2023-46604

CVE-2023-46604 ActiveMQ Safe Validator A single-file, non-destructive validator for Apache ActiveMQ CVE-2023-46604. It starts its own HTTP callback server, generates target-specific Spring XML in memory, sends the crafted OpenWire packet, correlates callbacks with unique tokens, and writes CSV/JS...

CVE-2026-63378 TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...

CVE-2026-63378 TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...

CVE-2026-63378

Prior to version 3.0.1-beta , the TAKO AI Agent for Okta is vulnerable to code injection (CWE-94). Authenticated users with a valid fctr_session cookie can submit arbitrary Python source in the script_code field of POST /api/react/execute-script without administrator privileges. The vulnerability...

CVE-2026-63378 TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...

CLEANSTART-2026-AZ51033 ajv (Another JSON Schema Validator) before 8

CVE-2025-69873 affects multiple packages. ajv Another JSON Schema Validator before 8. See references for individual vulnerability details...

CVE-2026-100074

A flaw was found in the Linux kernel's extended Berkeley Packet Filter eBPF subsystem. The BPF Type Format BTF validator failed to enforce that reference count bpfrefcount fields are unique within data structures. A local user with permissions to load eBPF programs could exploit this flaw by...

hibernate__hibernate-validator_CVE-2019-10219_6-0-17-Final

Hibernate Validator Version: 6.0.17.Final - 13-06-2019 What is it? This is the reference implementation of JSR-380 - Bean Validation 2.0. Bean Validation defines a metadata model and API for JavaBean as well as method validation. The default metadata source are annotations, with the ability to...

CVE-2026-119428

phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound connections via setup/validate.php, which lacks the setup-disabled guard. Attackers can POST attacker-chosen host and port values reaching...

CVE-2026-119428 phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled

phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound connections via setup/validate.php, which lacks the setup-disabled guard. Attackers can POST attacker-chosen host and port values reaching...