CVE-2026-108545 SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-108545

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

EUVD-2026-96340

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-108546 Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

CVE-2026-108546

Spotweb through version 1.5.8 is vulnerable to an OS command injection vulnerability within the runcommand NZB handler . The root cause is the unescaped substitution of shell metacharacters in a spot title for the $SPOTTITLE variable, which is subsequently passed to the exec() function. Remote at...

LeitWacht

GitLab Runner Leitwacht Control de salida de red para contenedores CI/CD de GitLab Runner. Leitwacht previene ataques a la cadena de suministro que exfiltran secretos, controlando lo que cada contenedor de trabajo puede acceder en la red. Cómo Funciona Leitwacht es un agente independiente que se...

EUVD-2026-96317

Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarded-For values against /api/auth/signIn,...

CVE-2026-98344

A flaw was found in the Linux kernel's DMA Direct Memory Access engine subsystem. This vulnerability can lead to a Denial of Service DoS when a local user triggers concurrent channel acquisition and release operations. Because the dmachanput function unconditionally decrements device reference...

payloads

payloads Git All the Payloads! Eine Sammlung von Web-Angriffs-Payloads. Pull-Requests sind willkommen! Verwendung Führe ./get.sh aus, um externe Payloads herunterzuladen und komprimierte Payload-Dateien zu entpacken. Payload-Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...

CVE-2026-98334

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When starting a wireless Access Point AP fails after setting beacon parameters, the kernel does not properly reset its internal state. A local attacker can exploit this condition by triggering subsequent scanning operations on th...

inception

Nota: Questo tool non è più in fase di sviluppo attivo; dai un'occhiata a PCILeech come alternativa. INCEPTION Inception è uno strumento di manipolazione della memoria fisica e di hacking che sfrutta il DMA basato su PCI. Il tool può attaccare tramite FireWire, Thunderbolt, ExpressCard, PC Card e...

mfcuk

README Compilazione: autoreconf -is ./configure make Esecuzione la più basilare: ./mfcuk -C -R 0:A -v 2 PACCHETTO MiFare Classic Universal toolKit MFCUK STRUMENTOI Mifare Classic DarkSide Key Recovery Tool mfcukkeyrecoverydarkside.c precedentemente noto come zvmfdarkside ... LICENZA GPL. Vedere...

smiiiiiiiiiiiiiiii

smiiiiiiiiiiiiiiii Sfruttare la System Management Mode con un interrupt molto molto molto molto molto molto molto lungo. Panoramica Si scopre che puoi rompere la SMM — l'ambiente di esecuzione sicuro e ultra privilegiato che gira invisibilmente in background su ogni CPU x86 — con niente più di...

sandy

sandy Copyright 2013 Sandy Scritto da: Laszlo Toth, Ferenc Spala Descrizione Sandy è un framework open-source per la valutazione della crittografia dei telefoni Samsung. Sandy dispone di diversi moduli che consentono di eseguire diversi scenari di attacco contro telefoni Samsung crittografati. Pe...

PT-2026-109673

Name of the Vulnerable Software and Affected Versions GenOffice versions prior to 0.11.506 Description An incorrect permissions issue exists in the HTTP MCP server file store. Local unprivileged users can access the world-readable genoffice-mcp-http directory located within the system temporary...

PT-2026-109657

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

PT-2026-114460

Уязвимость пользовательского интерфейса Nginx UI сервера nginx связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

CVE-2026-108582: Incorrect Permission Assignment for Critical Resource

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...

CVE-2026-108555: Use of Less Trusted Source

PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer.setIP that allows remote attackers to join other networks' discovery rooms by supplying a forged cf-connecting-ip header. Attackers who know a victim's public IP can appear as a local device on self-hosted instances not behind...

CVE-2026-108267

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...