CVE-2022-0540-RCE

Atlassian Jira Seraph: обход аутентификации и RCE CVE-2022-0540 Английский • Китайский Детали эксплуатации Как видно из блога автора, Atlassian предоставил длинный список затронутых плагинов подавляющее большинство из которых были ложными срабатываниями, а автор перечислил несколько действительно...

Compromised-Org-Chart-Generator

Générateur d'organigramme des comptes compromis Aperçu Active Directory est utilisé par les organisations comme fournisseur d'identité. Il contient les informations de tous les employés, y compris leurs noms, titres de poste, départements et leurs responsables. Les audits de mots de passe peuvent...

EUVD-2026-91857

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters. Attackers can supply a known or guessed monitor tag to endpoints such as...

CVE-2026-105030

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters. Attackers can supply a known or guessed monitor tag to endpoints such as...

CVE-2026-105030: Exposure of Sensitive Information to an Unauthorized Actor

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters. Attackers can supply a known or guessed monitor tag to endpoints such as...

CVE-2026-105030 Kener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via Dashboard API

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters. Attackers can supply a known or guessed monitor tag to endpoints such as...

CVE-2026-105030 Kener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via Dashboard API

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters. Attackers can supply a known or guessed monitor tag to endpoints such as...

CVE-2026-105030

Kener versions 4.0.0 before 4.1.6 are vulnerable to an information disclosure vulnerability. The root cause is a lack of visibility filters in dashboard API handlers, allowing unauthenticated attackers to retrieve hidden or inactive monitor data. By supplying a known or guessed monitor tag to end...

CVE-2025-6082

Preuve de concept de divulgation de chemin complet CVE-2025-6082 Auteur : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Vulnérabilité : Divulgation de chemin complet CWE-200 Description Cette preuve de concept exploite un bug de divulgation de chemin complet dans le plugin WordPress Bir...

CVE-2026-23980-Exploit

CVE-2026-23980 - Apache Superset 인증된 SQL 인젝션 / \ | | | | | || | \\ sqlExpression이 곧바로 쿼리로 전달됩니다. 매개변수화 없음. 희망 없음. Apache Superset ChartDataRestApi.data - QueryContext.getdfpayload - SqlaTable.getsqlaquery - adhoc 컬럼 sqlExpression / extras.where 인젝션 - validateadhocsubquery querytoxml로 우회됨 - 원시 SQL...

chart-down

chart-down Скачивание и сканирование Helm-чартов на предмет секретов с помощью TruffleHog. Получив URL репозитория Helm, chart-down загружает индекс репозитория, скачивает все архивы чартов, извлекает их и запускает TruffleHog для проверки содержимого. Требования Go 1.19+ TruffleHog в PATH brew...

CVE-2026-100259

In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...

CVE-2026-100259

In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...

CVE-2026-100259

In JetBrains YouTrack versions before 2026.2.18991 , an improper access control vulnerability exists within the Gantt chart functionality. This flaw allows users with view-only access to perform unauthorized edits . No specific exploit details or in-the-wild exploitation reports are provided in t...

EUVD-2026-90003

In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...

PT-2026-103306

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Improper access control on the Gantt chart allows users with view-only permissions to perform edits. Recommendations Update to version 2026.2.18991...

CVE-2026-100259: Incorrect Authorization

In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...

EUVD-2026-42294

CyberChef: Prototype pollution in Series Chart operation...

NPM: CyberChef: Prototype pollution in Series Chart operation

NPM: CyberChef: Prototype pollution in Series Chart operation vulnerability discovered by ? in WordPress Npm cyberchef versions 11.2.0...

CyberChef: Prototype pollution in Series Chart operation

On 5 June 2026 CyberChef received a security vulnerability report from @hyuunnn detailing a vulnerability in the Series Chart operation, where malicious input could result in prototype pollution of the data structures outputted from the operation. Other operations following Series Chart could hav...