CVE-2023-27163

CVE-2023-27163 PoC CVE-2023-27163, SSRF, request-baskets up to v1.2.1 Usage example myscript.sh -i 10.10.11.111 -f 'localhost:80' -t 10.10.14.27 -i victim server IP -f IP or address to direct connections produced by the SSRF -t in this option goes your local IP or attacker IP, for generating the...

Directory Traversal

Overview isomorphic-git is a pure JavaScript reimplementation of git that works in both Node.js and browser JavaScript environments. It can read and write to git repositories, fetch from and push to git remotes such as GitHub, all without any native C++ module dependencies. Affected versions of...

Directory Traversal

Overview org.webjars.npm:isomorphic-git is a pure JavaScript reimplementation of git that works in both Node.js and browser JavaScript environments. It can read and write to git repositories, fetch from and push to git remotes such as GitHub, all without any native C++ module dependencies. Affect...

CVE-2026-63395

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's git.checkout writes new child paths through symlinked leading directory components without checking them. A malicious repository can first place a directory symlink and later...

PT-2026-136365

Name of the Vulnerable Software and Affected Versions isomorphic-git versions prior to 1.38.6 Description The git.checkout function writes new child paths through symlinked leading directory components without proper validation. A malicious repository can create a directory symlink and subsequent...

FreeBSD : metasploit -- multiple vulnerabilities (4488c0db-d45b-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4488c0db-d45b-11f1-bae2-3497f65b111b advisory. Rapid7 published security advisories for issues fixed in releases 6.5.2 through 6.5.7. The...

OESA-2026-4587 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allo...

OESA-2026-4585 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allo...

OESA-2026-4586 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allo...

OESA-2026-4584 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allo...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection in the XQueryBuilder process when parsing a message body that is already a javax.xml.transform.Source with Saxon's default parser settings. An attacker can access files readable by the process or cause...

Important: qemu

Issue Overview: hw/display/qxl: validate primary surface stride against width CVE-2026-16271 hw/usb/hcd-xhci: Set reentrancy guard in timer functions CVE-2026-17588 hw/display/vga: fix text-mode OOB write after a graphics surface switch CVE-2026-77913 io/channel-socket: do not treat a zero length...

EUVD-2026-106875

The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mode response, causing the operator's machine to open a TCP connection to an arbitrary host...

EUVD-2026-106876

Metasploit Framework versions before 6.5.7 allow HTTP requests made through sendrequestcgi! to follow redirects to a different host without restricting the redirect destination. A malicious HTTP server can cause the system running Metasploit to make requests to arbitrary HTTP services reachable...

CVE-2026-109681

The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mode response, causing the operator's machine to open a TCP connection to an arbitrary host...

CVE-2026-109682

Metasploit Framework versions before 6.5.7 allow HTTP requests made through sendrequestcgi! to follow redirects to a different host without restricting the redirect destination. A malicious HTTP server can cause the system running Metasploit to make requests to arbitrary HTTP services reachable...

CVE-2026-109681

The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mode response, causing the operator's machine to open a TCP connection to an arbitrary host...

PT-2026-120146

The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mode response, causing the operator's machine to open a TCP connection to an arbitrary host...

CVE-2026-106470

The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such as a subscriber, to make the server open connections to arbitrary hosts and ports, including internal ones, and read back the outcome...

EUVD-2026-103256

The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such as a subscriber, to make the server open connections to arbitrary hosts and ports, including internal ones, and read back the outcome...