CVE-2026-108775

A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection...

CVE-2026-108774

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The...

CVE-2026-108774 erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The...

CVE-2026-108774 erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The...

CVE-2026-108774

A SQL injection vulnerability exists in erzhongxmu JEEWMS (up to version 2026.09.27-W39 ). The flaw is located within the getbinall and getbinallagv functions of the file src/main/java/com/zzjee/md/controller/MdBinController.java. An attacker can exploit this by manipulating the binstore/binid/de...

amass

Proyecto OWASP Amass El Proyecto OWASP Amass realiza mapeo de redes de superficies de ataque y descubrimiento de activos externos utilizando técnicas de recopilación de información de fuentes abiertas y reconocimiento activo. Instalación Puedes encontrar instrucciones adicionales de instalación y...

CVE-2026-108773

A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql injection. The attack may be initiated remotely...

CVE-2026-108772

A path traversal vulnerability exists in bleenco abstruse versions up to 2.1.0 . The flaw is located in the filepath.Join function within the file server/api/worker/download_cache.go file of the Cache Endpoint component. By manipulating the File argument, a remote attacker can perform a path trav...

CVE-2026-108772 bleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversal

A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/downloadcache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched...

CVE-2026-108770 Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery

A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request...

CVE-2026-108769 zhayujie CowAgent Markdown Rendering Markdown.tsx denial of service

A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been released to the public...

nuvola

nuvola nuvola con la n minúscula es una herramienta para volcar y realizar análisis de seguridad automáticos y manuales sobre configuraciones y servicios de entornos AWS, utilizando reglas predefinidas, extensibles y personalizadas creadas con una sintaxis YAML simple. La idea general detrás de...

reconspider

El Marco de Inteligencia de Fuentes Abiertas OSINT Más Avanzado ReconSpider ReconSpider es el marco de Inteligencia de Fuentes Abiertas OSINT más avanzado para escanear direcciones IP, correos electrónicos, sitios web, organizaciones y obtener información de diferentes fuentes. ReconSpider puede...

EUVD-2026-97122

A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call Argument Handler. The manipulation leads to allocation of resources. It is possible to initiate the attack remotely. The exploit is publicly...

CVE-2026-108768 zhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources

A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call Argument Handler. The manipulation leads to allocation of resources. It is possible to initiate the attack remotely. The exploit is publicly...

android_hid

androidhid Usa Android como Rubber Ducky contra un dispositivo Android o PC objetivo Ataque HID usando Android Usando Android como Rubber Ducky contra Android o Windows. Esta no es una técnica nueva, solo una demostración de cómo realizar un ataque HID usando Android en lugar de un rubber ducky...

noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface. Documentation • Installation • Usage • Github Action • Contributing • Changelog Noir is a SAST tool that reads source code and extracts the endpoints an application exposes — paths, methods, parameters, headers, cookies...

frogy2.0

Orbis - Inteligencia de Superficie de Ataque Inteligencia de Superficie de Ataque de Espectro Completo Orbis mapea automáticamente toda la superficie de ataque orientada a internet de su organización, subdominios, puertos abiertos, aplicaciones web, infraestructura en la nube, certificados TLS,...

thc-ipv6

THC-IPV6-ATTACK-TOOLKIT c 2005-2022 [email protected] https://github.com/vanhauser-thc/thc-ipv6 Licenciado bajo AGPLv3 ver archivo LICENSE INTRODUCCIÓN Este código fue inspirado cuando entré en contacto con IPv6, aprendí más y más sobre él, y luego no encontré herramientas para jugar léase:...

CVE-2026-19739

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/llsw/ullllcpconnupd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification llcprxnoderetain, which marks it...