MAL-007

MAL-007: XML External Entity via Local Registry Entries in WSO2 ESB An inline XML External Entity XXE attack was identified in the WSO2 ESB “Local Entities” tool. Why no CVE? The vendor replied that this vulnerability was "Fixed in WUM" and no public disclosure was made. Requirements: This...

pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets

A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules DER format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code HMAC operations. If an application supports both asymmetric and...

cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...

CVE-2026-114249

The dhikshitha29 Insurance-Management-System contains an improper authorization vulnerability within the Policy Holder Update Form component, specifically affecting the file /Agent/includes/UpdatePolicyHolder-inc.php. By manipulating the Policy_no argument, an attacker can achieve unauthorized ac...

CVE-2026-114249 dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization

A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. This vulnerability affects unknown code of the file /Agent/includes/UpdatePolicyHolder-inc.php of the component Policy Holder Update Form. Th...

cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...

CVE-2026-26717

CVE-2026-26717: HMAC Timing Attack in OpenFUN Richie LMS Author: Elvin Latifli CVE ID: CVE-2026-26717 Severity: Medium CVSS 3.1: 4.8 — AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Product: OpenFUN Richie all versions prior to commit a1b5bbd Affected Component: src/richie/apps/courses/api.py —...

buffalo

Buffalo A Python 3 script to execute dictionary/wordlist attacks on a target SSH server using two text files as input. Authored for the purposes of my Intel technical screening. Installation This script depends on Paramiko and Colorama. Install the dependencies via pip install -r requirements.txt...

CVE-2022-24834-

CVE-2022-24834 python exploit.py -url -port...

Scout2

AWS Scout2 .. image:: https://travis-ci.org/nccgroup/Scout2.svg?branch=master :target: https://travis-ci.org/nccgroup/Scout2 .. image:: https://coveralls.io/repos/github/nccgroup/Scout2/badge.svg?branch=master :target: https://coveralls.io/github/nccgroup/Scout2 .. image::...

EUVD-2026-107228

On a brpc::Server that sets both ServerOptions.auth and ServerOptions.internalport, the HTTP built-in service exemption on internalport can be abused to bypass authentication entirely. VerifyHttpRequest returns true without checking any credential when a built-in service is requested on...

CVE-2026-78334

Missing authentication in the streaming RPC path of Apache bRPC version 1.18.0 on all platforms allows a remote attacker to bypass server authentication and inject or deliver streaming frames, when a server is configured with an Authenticator. Root Cause: When authentication is configured,...

CVE-2026-114243

A security flaw exists in the dhikshitha29 Insurance-Management-System within the mysqli_query function of the /Agent/ManagePolicy/EditPolicyHolder.php file. Remote attackers can perform an SQL injection by manipulating the Policy_no/Name arguments. While the project utilizes a rolling release st...

CVE-2026-114243 dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection

A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this vulnerability is the function mysqliquery of the file /Agent/ManagePolicy/EditPolicyHolder.php. Performing a...

CVE-2011-1571

CVE-2011-1571 Summary Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition CE 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors. CVE Detail :...

EUVD-2026-107216

Enforceable assertion in the streaming feature of Apache bRPC version 0 and unconditionally asserts CHECKbuf.IsEmpty on the frame payload. A feedback frame that carries an unexpected payload, or a feedback frame received on a stream where flow control is disabled curbufsize == 0, reaches these...

CVE-2026-78334

Apache bRPC versions

CVE-2026-78334 Apache bRPC: Missing Authentication for Streaming RPC Frames

Missing authentication in the streaming RPC path of Apache bRPC version 1.18.0 on all platforms allows a remote attacker to bypass server authentication and inject or deliver streaming frames, when a server is configured with an Authenticator. Root Cause: When authentication is configured,...

CVE-2026-74755 Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service

An integer underflow in the mcpack2pb component of Apache bRPC version 1.18.0 on all platforms allows remote attackers to crash a bRPC server by sending a request containing a string field with a zero valuesize. The UnparsedValue::asstring function computes size - 1 without validating size; when...

CVE-2026-74755

Apache bRPC (versions prior to 1.18.0 ) is vulnerable to a Denial of Service due to an integer underflow in the mcpack2pb component. The UnparsedValue::as_string() function in src/mcpack2pb/parser.cpp fails to validate the value_size of string fields from network data; when the size is 0, the cal...