CVE-2026-105797

In SimpleChat versions 0.261.003 and 0.261.027 , an authorization ordering flaw in POST /api/user/plugins enables an authenticated low-privileged user to bypass security checks. By omitting the top-level MCP type , the _reject_non_admin_mcp_stdio inspection is skipped before the type is restored ...

CVE-2026-105795 Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests

Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.responsesemantics.oauthcardpath from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe...

CVE-2026-105795 Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests

Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.responsesemantics.oauthcardpath from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe...

EUVD-2026-93424

Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.responsesemantics.oauthcardpath from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe...

CVE-2026-105795 Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests

Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.responsesemantics.oauthcardpath from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe...

wp2shell-vulnerability-scanner

WP2Shell Scanner A read-only, non-destructive security audit tool that scans WordPress installations for the wp2shell vulnerability chain. Panoramica WP2Shell Scanner è un'utilità bash che ricerca ricorsivamente un albero di directory per installazioni WordPress e verifica se ciascun sito esegue...

CVE-2026-105790 Microsoft UFO: Authenticated Galaxy device registration can bypass WebSocket SSRF IP pinning via redirects

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through /api/devices can supply a permitted attacker-controlled WebSocket endpoint while aip/transport/websocket.py applies pinnedaddresses only to...

EUVD-2026-93407

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through /api/devices can supply a permitted attacker-controlled WebSocket endpoint while aip/transport/websocket.py applies pinnedaddresses only to...

CVE-2026-106037

Versions of Mooncake through 0.3.13.post1 are affected by a missing authentication vulnerability in the Store REST service . The service binds to 0.0.0.0 without requiring authentication on any route. This allows unauthenticated attackers to access specific endpoints, including /api/get , /api/pu...

PENTEST-LAB

PENTEST-LAB A modern vulnerable application & cyber range for learning web, API, cloud, AI, and blue-team security through hands-on attack chains. ╔═══════════════════════════════════════════════════════════════╗ ║ ██████╗ ███████╗███╗ ██╗████████╗███████╗███████╗████████╗ ║ ║ ██╔══██╗██╔════╝███...

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

Plugin Acyber Wordpress !WARNING Vorübergehende Notfall-Schutzmaßnahme für CVE-2026-60137 & CVE-2026-63030 wp2shell Vorübergehende Notfall-Risikominderung für die wp2shell-Schwachstellenkette 🇬🇧 Englische Beschreibung Dieses leichtgewichtige WordPress-Plugin dient als temporärer virtueller Patch...

Check-Point-Trusted-Access-Review

Check Point Trusted Access Review APPLICARE SEMPRE LE PATCH DEL FORNITORE IL PRIMA POSSIBILE Applicazione web locale per condurre una Check Point Trusted Access Review con comandi attendibili della Check Point Management API. La maggior parte dei controlli è solo di revisione. Qualsiasi azione di...

CVE-LiteLLM

cve-id ⚡ Utilizzo Semplice Usa questo progetto solo in ambienti sicuri e autorizzati come: Macchine virtuali locali Container Docker Configurazioni di laboratorio isolate Ambienti di test di penetrazione autorizzati Esempio di configurazione: git clone cd Project use python follow below Create a...

Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling)

Summary Before Langflow 1.10.3, several built-in components sent server-side HTTP requests to URLs the flow author controls, with no SSRF enforcement. An authenticated user who can build or run flows could make the Langflow server reach loopback, RFC 1918 / private networks, link-local addresses...

GHSA-J8F7-X8JM-WMM4 Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling)

Summary Before Langflow 1.10.3, several built-in components sent server-side HTTP requests to URLs the flow author controls, with no SSRF enforcement. An authenticated user who can build or run flows could make the Langflow server reach loopback, RFC 1918 / private networks, link-local addresses...

CVE-2026-105835

PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor authentication codes. Attackers who know a user's password can reuse the ten-minute pending token to guess six-digit codes until one...

wordpress-batch-rce-lab

wp2shell: WordPress Batch RCE Un'analisi tecnica di CVE-2026-63030, un bug logico nell'endpoint batch dell'API REST del core di WordPress che consente a una richiesta anonima di essere eseguita sotto la rotta e il controllo dei permessi di una richiesta diversa, concatenandosi in CVE-2026-60137 S...

EUVD-2026-93379

PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor authentication codes. Attackers who know a user's password can reuse the ten-minute pending token to guess six-digit codes until one...

ENV-CVE-2021-3975

ENV-CVE-2021-3975 — Ambiente di riproduzione della vulnerabilità libvirt Questo repository è uno snapshot di un ambiente riproducibile per la vulnerabilità CVE-2021-3975 use-after-free di libvirt qemuProcessHandleMonitorEOF, CWE-416, esportato dalla corrispondente immagine container...

BIT-GITLAB-2026-4523 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper...