CVE-2024-31719----AMI-Aptio-5-Vulnerability

AMI-Aptio--NvLock-Vulnerability Information CVE ID: CVE-2024-31719 Link Vulnerability Type: Incorrect Access Control Vendoer of Product: American Megatrends International, LLC. Product: AMI Aptio - 5 Atack Type: Local Attack Vector The attacker can easily bypass the NvLock module's access...

CVE-2026-111984 AUTOMATIC1111 stable-diffusion-webui Card Builder ui_extra_networks.py create_item_html cross site scripting

A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function createitemhtml of the file modules/uiextranetworks.py of the component Card Builder. The manipulation of the argument filename leads to cross site scripting. It is possible to initiate t...

CVE-2026-111984

The AUTOMATIC1111 stable-diffusion-webui software (up to version 1.10.1 ) contains a cross-site scripting (XSS) vulnerability within the Card Builder component. The flaw exists in the create_item_html function located in the modules/ui_extra_networks.py file, where improper handling of the filena...

CVE-2026-112021

The snac2 software prior to version 2.93 is vulnerable to a heap-based buffer overflow in the _xs_json_load_lexer() function. An unauthenticated remote attacker can trigger this by sending a crafted application/activity+json POST request to activitypub_post_handler(). The vulnerability occurs bec...

CVE-2026-112021 snac2 before 2.93 Heap-Based Buffer Overflow via JSON Parser _xs_json_load_lexer()

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

CVE-2026-111999

Versions 0.8.0 through 0.9.0 of Vanus are affected by a missing authentication vulnerability in the gateway CloudEvents HTTP receiver . This flaw allows unauthenticated remote attackers to bypass token authentication and authPublish checks by sending forged CloudEvents to the /namespaces/{ns}/eve...

EUVD-2026-103452

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...

CVE-2026-111998 Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway

Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to manage namespaces, eventbuses, users,...

CVE-2026-111998

Vanus versions 0.8.0 through 0.9.0 are vulnerable to a default credentials vulnerability (CWE-1392) involving a hardcoded admin token . Unauthenticated remote attackers can exploit this by sending the fixed Bearer token to the gateway gRPC proxy port . Successful exploitation grants the attacker ...

CVE-2023-27703

CVE-2023-27703 CVE-2023-27703 An Android version of pikpak version V1.29.2 element debugging interface leakage vulnerability fix at pikpak 1.30.1 Suggested description The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface. Additional Informati...

chub-supply-chain-poc

Context Hub Supply Chain PoC Zero-sanitization vulnerability inContext Hub @aisuite/chub v0.1.3 enables silent dependency injection through the MCP documentation pipeline. References: CWE-94 Code Injection | CWE-829 Untrusted Control Sphere | CWE-345 Insufficient Verification of Data Authenticity...

CVE-2021-21300

CVE-2021-21300 just clone me then your machine will print "PWNED" ref:https://www.openwall.com/lists/oss-security/2021/03/09/3...

CVE-2023-26269

CVE-2023-26269: Misconfigured JMX in Apache James By default Apache James opens a JMXRMI service that listens on localhost, port 9999. Because the JMX is misconfigured to allow unauthenticated access, an attacker that has local access to the machine running James can use a “MLet attack” in order ...

CVE-2018-7600

POC of CVE-2018-7600 Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which...

CVE-2025-68621

CVE-2025-68621 — Trilium Notes Timing Attack on /api/login/sync Severity: HIGH CVSS 7.4 Affected Software: TriliumNext/Trilium 0.101.0 Vulnerability Type: CWE-208 – Observable Timing Discrepancy Fixed In: Trilium 0.101.0 PR 8129 Published: 2026-02-06 | Reserved: 2025-12-19 Table of Contents 1. My...

cve-2018-15473

CVE-2018-15473: OpenSSH Username Enumeration OpenSSH through 7.7 allows remote attackers to enumerate valid usernames by sending malformed authentication requests and observing differential server responses. Details Field| Value ---|--- Affected Software| OpenSSH 2.3 through 7.7 CVSS v3.1| 5.3...

CVE-2025-25617

CVE-2025-25617 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to create syllabus entries — a role intended only for administrators. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to the following endpoint:...

CVE-2024-27686

MikroTik RouterOS Denial of Service Vulnerability 📌 Description This document describes a Denial of Service DoS vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by...

CVE-2022-22733

CVE-2022-22733 CVE-2022-22733 is a vulnerabilit that affects Apache ShardingSphere ElasticJob-UI 3.0.0 and below versions, The vulnerability lead to Privilege Escalation. But, with abusing of the escalated privileges a JDBC Attack it can preformed & achieve RCE. You can read the vulnerability...

CVE-2020-3580

CVE-2020-3580 Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm Usage Stage address change me Demonstrate Logon to Cisco ASA WebVPN Visit staged malicious page Recover your credentials Patch ; Example / Result...