PT-2026-102815

Name of the Vulnerable Software and Affected Versions JupyterLab versions 3.0.0 through 4.5.10 JupyterLab versions 4.6.0 through 4.6.3 JupyterLite Core versions 0.x through 0.8.3 Description An issue exists where the Plural-Forms header in selected third-party language packs can append JavaScript...

CVE-2026-102904: Improper Neutralization of Argument Delimiters in a Command

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

CVE-2026-97395: Undefined Security Weakness

Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata. In versions 1.8.0, when Polaris performs server-side Iceberg operations, including commits and purges, it may use thos...

PT-2026-102736

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls for...

PT-2026-102739

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with an MCP-scoped token to perform actions beyond the intended scope of that token due ...

PT-2026-102800

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Command injection exists in the certificate export CLI functionality. A privileged authenticated CLI user can exploit this weakness to execute arbitrary commands with root privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-49469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, an authenticated hotliner or technician can submit crafted criteria...

CVE-2026-76735: Exposure of Sensitive Information to an Unauthorized Actor

A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow an authenticated local attacker with high privileges to retrieve information which could be used to potentially gain further access to netwo...

CVE-2026-100296: Improper Check for Unusual or Exceptional Conditions

In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web server's SOAP-RPC handler, silently downgrades the administrator password to the default value and corrupts the in-memory authentication state until the device reloads. The handler...

CVE-2026-102830: Improper Neutralization of Input During Web Page Generation

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

CVE-2026-84436: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges...

CVE-2026-96430: Exposed Dangerous Method or Function

Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbitrary SQL commands via the sql parameter...

CVE-2026-102242: Improper Link Resolution Before File Access

Improper link resolution CWE-59 / CWE-22 in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authenticated attacker with tool execution permissions to bypass directory boundary restrictions via symbolic links. Because path...

SUSE CVE-2026-67419

RabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authenticated user who can bind a queue to a topic exchange and publish to it can use consecutive segments in a binding key to make both topic matchers revisit the same trie-node and routing-key-suffix states without memoization. Th...

WSO2-2021-1258

WSO2-2021-1258: WSO2 ESB의 Zip Slip 취약점 WSO2 Management Console에서 ZIP 파일 기반 디렉터리 트래버설Zip Slip 취약점이 확인되었습니다. 특정 파일을 작성/덮어쓰기하여 원격 코드 실행이 가능할 수 있습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. CVE가 없는 이유는? 저나 공급업체 모두 이 취약점에 대해 CVE를 요청하지 않았습니다. 요구 사항: 이 취약점은 다음을 요구합니다: 유효한 사용자 자격 증명 개념 증명: ...

CVE-2026-102366 mall4j through 4.0 Unrestricted File Upload in Admin File Endpoints

mall4j through 4.0 contains an unrestricted file upload vulnerability in FileController endpoints that lack authorization checks and accept arbitrary file types without validation. Attackers with any authenticated token can upload HTML or SVG files that execute scripts in administrator browsers...

CVE-2026-102366

The mall4j application (versions through 4.0 ) is vulnerable to an unrestricted file upload in its FileController endpoints. The root cause is a lack of authorization checks and insufficient validation of file types. An attacker possessing any authenticated token can upload HTML or SVG files to t...

CVE-2025-59528

Version française CVE-2025-59528 개념 증명 Proof of Concept 승인된 환경에서 취약점의 기술적 검증에 초점을 맞춘 최소 PoC입니다. 사전 요구 사항 대상 Flowise 대시보드에 사용자 계정이 있어야 합니다. 해당 계정에 연결된 유효한 API 키가 있어야 합니다. PoC를 실행하기 전에 콜백 호스트에서 리스너를 시작해야 합니다 예: nc -lvn 4444. 사용 예시 먼저 리스너를 시작합니다: nc -lvn 4444 python3 poc.py --domain example.com --ho...

OTRS-4.0.1-6.0.1-Remote-Command-Execution

OTRS-4.0.1-6.0.1 원격 명령 실행 이 익스플로잇은 https://www.exploit-db.com/exploits/43853 을 기반으로 개발되었습니다. OTRS 패널에 대해 인증을 수행하고 리버스 셸을 제공합니다. 사용법: python3 CVE-2017-16921.py CVE-2017-16921: OTRS 6.0.x6.0.1 포함, OTRS 5.0.x5.0.24 포함, OTRS 4.0.x4.0.26 포함에서 에이전트로 OTRS에 로그인한 공격자는 PGP와 관련된 양식 매개변수를 조작하고 OTRS 또는 웹 서버...

Centreon-20.04

CVE-2020-12688 - Centreon 20.04 인증된 RCE minHelpCommand.php 명령 이름 변수 RCE CVE-2020-12688 Centreon 최신 릴리스 문서: https://docs.centreon.com/current/en/releases/centreon-core.html 발견자: TheCyberGeek 발견 날짜: 30/04/2020 공개 날짜: 15/06/2020 사용되지 않는 minHelpCommand.php버전 19.04에서 제거됨를 통한 명령 실행. 제거된 함수는 로그인한 사용자가 접...