CVE-2026-55102 hashi-vault-js: Vault token and secret values exposed in thrown errors

hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vault.js passes failed requests through parseAxiosError, which rethrows the raw AxiosError while retaining AxiosError.config and the equivalent response configuration. These...

EUVD-2026-77640

hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vault.js passes failed requests through parseAxiosError, which rethrows the raw AxiosError while retaining AxiosError.config and the equivalent response configuration. These...

CVE-2026-55102 hashi-vault-js: Vault token and secret values exposed in thrown errors

hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vault.js passes failed requests through parseAxiosError, which rethrows the raw AxiosError while retaining AxiosError.config and the equivalent response configuration. These...

CVE-2026-55102 hashi-vault-js: Vault token and secret values exposed in thrown errors

hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vault.js passes failed requests through parseAxiosError, which rethrows the raw AxiosError while retaining AxiosError.config and the equivalent response configuration. These...

CVE-2026-55102

CVE-2026-55102 affects hashi-vault-js , a Node.js module for interacting with the HashiCorp Vault API, in versions prior to 0.5.2 . Every API method in src/Vault.js rethrows the raw AxiosError via parseAxiosError(), retaining the full Axios configuration including the X-Vault-Token header and err...

EUVD-2026-77637

Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthenticated GET /api/pages/nested endpoint implemented by Api::PagesControllernested in app/controllers/alchemy/api/pagescontroller.rb returns an unfiltered pag...

CVE-2026-57579 Alchemy: Unauthenticated nested page API leaks restricted & unpublished content

Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthenticated GET /api/pages/nested endpoint implemented by Api::PagesControllernested in app/controllers/alchemy/api/pagescontroller.rb returns an unfiltered pag...

CVE-2026-57579

CVE-2026-57579 affects Alchemy CMS , an open-source Ruby on Rails content management system. The unauthenticated GET /api/pages/nested endpoint (in Api::PagesController#nested) performs no authorization and does not scope page descendants by the caller's ability, allowing anonymous callers to ret...

CVE-2026-57579 Alchemy: Unauthenticated nested page API leaks restricted & unpublished content

Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthenticated GET /api/pages/nested endpoint implemented by Api::PagesControllernested in app/controllers/alchemy/api/pagescontroller.rb returns an unfiltered pag...

CVE-2026-57579 Alchemy: Unauthenticated nested page API leaks restricted & unpublished content

Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthenticated GET /api/pages/nested endpoint implemented by Api::PagesControllernested in app/controllers/alchemy/api/pagescontroller.rb returns an unfiltered pag...

CVE-2024-9166

CVE-2024-9166 Vulnerability Scanner A Python-based tool to scan websites for the CVE-2024-9166 vulnerability, which is one of the most recent ones at the moment of publishing this repository.. It checks for vulnerable patterns, tests the vulnerability to confirm it, and logs results to a file. I'...

CVE-2018-5951

CVE-2018-5951: MikroTik RouterOS Denial of Service Vulnerability Vulnerability Summary A vulnerability in MikroTik RouterOS allows an unauthenticated remote attacker to force a router to reboot. This is done by sending a packet of the size of 1 byte to RouterOS's IPv6 address using IP proto 97. A...

milvus-auth-audit

milvus-auth-audit Milvus authentication security audit script. Detects three authentication flaws: Flaw| CVE| Affected versions| Detection method ---|---|---|--- sourceid backdoor auth bypass| CVE-2025-64513| --port 19530 --mgmt-port 9091 --internal-port 53100 Arguments: --host: Milvus proxy...

CVE-2026-48558

CVE-2026-48558: SimpleHelp OIDC Authentication Bypass !WARNING This code is provided AS IS for educational and research purposes only. Do not use this PoC on production systems, shared environments, or any unauthorized targets. This exploit demonstrates a critical remote code execution RCE...

CVE-2026-59230

CVE-2026-59230 — camel-mail MimeMultipart header injection headersInline Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

OESA-2026-3856 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp. Security Fixes: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a...

OESA-2026-3854 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp. Security Fixes: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a...

OESA-2026-3855 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp. Security Fixes: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a...

OESA-2026-3853 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp. Security Fixes: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a...

OESA-2026-3845 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: An unknown vulnerability exists in QEMU, with no detailed description available at this time.CVE-2026-15264 CVE-2026-16457 is a security vulnerability in QEMU. The specific details of thi...