CVE-2026-105707 uptrace user_handler.go Login information exposure

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/userhandler.go. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has...

CVE-2026-105707 uptrace user_handler.go Login information exposure

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/userhandler.go. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has...

EUVD-2026-92946

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/userhandler.go. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has...

SynGhost

Syntactic-Ghost SynGhost SynGhost: невидимая и универсальная не зависящая от задачи бэкдор-атака посредством синтаксического переноса Вклад и особенности SynGhost имеет следующий вклад Чтобы снизить риски существующих не зависящих от задачи бэкдоров, мы предлагаем $\mathttmaxEntropy$ — основанный...

Rubrics-as-an-Attack-Surface

Рубрики как поверхность атаки: скрытый дрейф предпочтений в LLM-судьях 📊 Датасет • 🤖 Обученные модели • 📝 Статья • 💻 Репозиторий Этот репозиторий содержит код для статьи Rubrics as an Attack Surface: Stealthy Preference Drift in LLM Judges авторов Ruomeng Ding, Yifei Pang, He Sun, Yizhong Wang,...

copy-fail-checker

Copy Fail Checker — CVE-2026-31431 Un petit script Bash sans dépendances qui vous indique si votre système Linux est exposé à la vulnérabilité locale d'élévation de privilèges Copy Fail CVE-2026-31431. Le script est en lecture seule : il n'exploite jamais la faille, ne charge aucun module kernel ...

CVE-2026-105621

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in imprope...

CVE-2026-105704

A vulnerability exists in SourceCodester Drug Recommendation System 1.0 within the Auth Guard component. The flaw allows for improper authentication by manipulating the user_id argument. This vulnerability can be triggered via a remote attack vector. While specific exploitation links are not prov...

CVE-2026-105572

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The explo...

CVE-2026-105611 chillzhuang SpringBlade User Detail Endpoint RoleController.java improper authorization

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Detail Endpoint. This manipulation of the argument ID causes...

CVE_Project

Projet CVE Préparations pour l'exploitation : 1.Installer Tomcat 7 sur la machine virtuelle sudo apt-get install tomcat7 2.Si la première étape a échoué, définissez JDKDIRS="/usr/lib/jvm/java-8-oracle" et ajoutez les instructions “export JAVAHOME=/usr/lib/jvm/java-8-oracle” et “export...

CVE-2026-105610 chillzhuang SpringBlade Parameter Submit Management ParamController.java improper authorization

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter Submit Management. The manipulation of the argument...

EUVD-2026-92932

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter Submit Management. The manipulation of the argument...

CVE-2026-105610 chillzhuang SpringBlade Parameter Submit Management ParamController.java improper authorization

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter Submit Management. The manipulation of the argument...

CVE-2026-105573 newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors...

EUVD-2026-92930

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The explo...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE Cette preuve de concept PoC montre comment un attaquant peut enchaîner la CVE-2024-4577 d'Orange Tsai avec un DNS rebinding pour exécuter du code à distance sur l'infrastructure réseau interne directement via le navigateur web de la victime. En contournant la Same-Origin Poli...

DEBIAN-CVE-2026-104041

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch NSS responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecke...

CVE-2026-104039

A flaw was found in SSSD. A local user can cause a denial of service DoS by disrupting system authentication services. When handling Generic Security Services Application Programming Interface GSSAPI authentication in the Pluggable Authentication Module PAM responder, cached connection state is...

CVE-2026-104041

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch NSS responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecke...