CVE-2026-108568: Insufficient Verification of Data Authenticity

A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file system/controllers/billing/actions/paypal.php of the component Billing Module. Executing a manipulation of the argument bid/sig can lead to insufficient...

CVE-2026-108542: Server-Side Request Forgery (SSRF)

A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler. The manipulation of the argument path results in server-side request forgery. The attack can be executed remotel...

PT-2026-110098

Name of the Vulnerable Software and Affected Versions InstantSoft icms2 versions prior to 2.18.2 Description A remote cross site scripting issue exists within the Private Message Handler component. The problem occurs in the index function located in the...

CVE-2026-108574: Authorization Bypass Through User-Controlled Key

A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...

CVE-2026-108682: Improper Resource Shutdown or Release

A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the publi...

PT-2026-110354

Name of the Vulnerable Software and Affected Versions erzhongxmu JEEWMS versions prior to 2026.09.27-W39 Description A remote SQL injection issue exists within the Inbound Quality Check Pda Interface component. The flaw is located in the WmInQmIController.list function within the...

CVE-2026-108571: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli of the file webmain/task/openapi/openkqjAction.php of the component Openkqj Action. This manipulation of the argument ID causes sql injection. The attack is possible to be carri...

PT-2026-110103

Name of the Vulnerable Software and Affected Versions Xinhu Rainrock RockOA versions prior to 2.7.7 Description A remote SQL injection exists within the Openkqj Action component. The issue occurs in the kqjcmdModel::returnchuli function located in the webmain/task/openapi/openkqjAction.php file. ...

PT-2026-110000

Name of the Vulnerable Software and Affected Versions Studio-Saelix Sencho versions prior to 0.97.1 Description An issue exists in the Add Remote Node API Endpoint component within the isValidRemoteUrl function of the backend/src/utils/validation.ts file. An authenticated user with node-managemen...

CVE-2026-108567: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

o365-attack-toolkit

¿Qué es o365-attack-toolkit o365-attack-toolkit permite a los operadores realizar ataques de phishing oauth. Decidimos pasar del antiguo modelo de definiciones estáticas a ser completamente "interactivos" con la cuenta en tiempo real. Algunos de los cambios Búsqueda interactiva de correos...

disclosure-thinkware-u3000

Thinkware U3000 Dashcam: Vulnerabilità di Sicurezza Tre vulnerabilità nel protocollo di controllo WiFi locale della dashcam Thinkware U3000, scoperte tramite reverse engineering dell'app Android ufficiale e confermate su hardware reale. Tutte e tre richiedono solo l'accesso alla rete locale: ness...

CVE-2026-108555

PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer.setIP that allows remote attackers to join other networks' discovery rooms by supplying a forged cf-connecting-ip header. Attackers who know a victim's public IP can appear as a local device on self-hosted instances not behind...

CVE-2026-108545

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-108555

The PairDrop application (versions through 1.11.2 ) is vulnerable to an IP spoofing issue within the Peer._setIP function. This vulnerability stems from the software's reliance on the cf-connecting-ip header, which allows remote attackers to provide a forged header. If an attacker knows a victim'...

EUVD-2026-96340

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-108546 Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

CVE-2026-108545 SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-108545

SillyTavern versions 1.12.13 through 1.19.0 are vulnerable to a pre-authentication Denial of Service (DoS) . The root cause is that body-parser middleware executes before authentication and whitelist checks, allowing unauthenticated remote attackers to submit large or compressed JSON or urlencode...

CVE-2026-108545

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...