4523 matches found
CVE-2026-105935 Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission
The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The Functions Worker performs this publish with its own broker client, which authenticates with the Worker's configured...
CVE-2026-105935
The Apache Pulsar Functions Worker contains a vulnerability where a REST API endpoint for triggering functions publishes caller-supplied values to input topics without verifying if the caller has produce permissions for those specific topics. The worker uses its own broker-client credentials for ...
php2shell-poc
PHP2Shell: a reproducible PHP request-lifecycle RCE lab...
USN-8948-2: PHP vulnerabilities
USN-8948-1 fixed vulnerabilities in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. This provides the corrosponding updates in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that PHP incorrectly handle...
Exploit for CVE-2026-109618
PHP2Shell: CVE-2026-109618 / CVE-2026-109619 PHP RCE Source Au...
PHP2Shell-Lifecycle-Analysis
PHP2Shell: Before the First Line of PHP Analysis of the re...
Exploit for CVE-2026-109619
CVE-2026-109619 Cross-request use-after-free in PHP's se...
CVE-2026-109619
request-owned internal state can survive after its backing memory has been freed. A later request handled by the same worker may use that stale state before normal initialization resets it...
USN-8948-1: PHP vulnerabilities
It was discovered that PHP incorrectly handled out-of-memory conditions while processing requests. A remote attacker could use this issue to execute arbitrary code. CVE-2026-109618 It was discovered that PHP incorrectly managed internal request state across worker reuse. A remote attacker could u...
CVE-2026-77630
A flaw was found in libupnp. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by submitting requests containing slow or non-responsive hostnames. Because the library performs synchronous network address lookups on attacker-supplied hostnames, worker...
Expected Behavior Violation
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Expected Behavior Violation in the condense method of vllm/v1/worker/gpuinputbatch.py, where stale allowedtokenids mask entries are not cleared afte...
GO-2026-6774 Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context in github.com/0xJacky/Nginx-UI
Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context in github.com/0xJacky/Nginx-UI...
CVE-2026-112267
SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstraphost and bootstrapport fields. Attackers sending crafted requests to the Decode worker's...
CVE-2026-112267 SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker
SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstraphost and bootstrapport fields. Attackers sending crafted requests to the Decode worker's...
CVE-2026-112267 SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker
SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstraphost and bootstrapport fields. Attackers sending crafted requests to the Decode worker's...
CVE-2026-112267
SGLang versions through 0.5.22 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability when operating in prefill/decode disaggregation mode . The flaw exists in the Decode worker because the /generate endpoint fails to properly validate the client-supplied bootstrap_host and bootstra...
EUVD-2026-104306
SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstraphost and bootstrapport fields. Attackers sending crafted requests to the Decode worker's...
CLSA-2026-1792386711 TuxCare security update for @angular/service-worker (1 CVE)
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 9.1.13-tuxcare.11...