EUVD-2026-80070

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

EUVD-2026-80050

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

EUVD-2026-80049

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

EUVD-2026-80048

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious cod...

EUVD-2026-80036

NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval in qosxianzaddcgi, qosxianzshowcgi, qosfilteraddcgi, and qosfiltershowcgi handlers. An attacker can inject persistent script code through crafted QoS rule name input that executes when the stored data is...

EUVD-2026-80033

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntoolstcpdumpstartset.cgi caused by an unsized sprintf call when processing form values. An attacker can submit crafted input to this cgi endpoint to overflow the stack buffer and potentially execute arbitrary code...

CVE-2021-35956

CVE-2021-35956. CVE-2021-35956에 대한 개념 증명 익스플로잇, AKCP sensorProbe - '다중' 크로스 사이트 스크립팅 XSS. Exploit Title: AKCP sensorProbe - '다중' 크로스 사이트 스크립팅 XSS. Date: 07-01-2021. Exploit Author: Tyler Butler. Vendor Homepage: https://www.akcp.com/. Software Link:...

CVE-2022-22947-Spring-Cloud-Gateway

Spring Cloud Gateway 원격 코드 실행 취약점 이 취약점은 운영 중인 서비스에 위험도가 높으므로, 허가 없이 스캔하지 마십시오. 사용 설명 root@kitploit: ╰─ ./CVE-2022-22947 -h ─╯ 실행 명령: ./CVE-2022-22947 -u http://127.0.0.1:8080 -c whoami 일괄 탐지: ./CVE-2022-22947 -l url.txt 취약점 환경 실행 root@kitploit: java -jar vuln/spring-gateway-demo-0.0.1-SNAPSHOT.j...

CVE-2017-13253

CVE-2017-13253 CVE-2017-13253에 대한 PoC 코드. 전체 글은 여기에서 확인할 수 있습니다. 참고로 숫자는 블로그 게시물과 약간 다릅니다. 왜냐하면 0x2000 크기의 힙으로 충돌 가능성이 더 높다는 것을 발견했기 때문입니다 물론 충분히 여러 번 실행하면 결국 충돌할 것입니다. 질문/문제/의견이 있으면 트위터@tamirzb로 연락 주세요. 빌드 이를 빌드하려면: 1. Android 소스 코드 다운로드. 2. 이 저장소를 AOSP/external에 넣습니다. 3. 다음 명령을 실행합니다:...

CVE-2026-92184

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

vhf-morse-transmitter-monitor

📡 VHF Monitor RF Transmitter TEMPEST / EMI Side-Channel Morse Generator Author: TA1EEI Efe Işık Version: 1.3 License: MIT Open Source / Educational & Experimental 📰 Featured In & Media Coverage UK NCSC National Cyber Security Centre – Included in the CTO Weekly Summary September 2026 highlighting...

EUVD-2026-80932

An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...

Reverse, Patch, Recompile: Defeating SSL Pinning from the Inside Out

Whitepaper called Reverse, Patch, Recompile: Defeating SSL Pinning from the Inside Out. Is SSL pinning blocking your network analysis? Learn how to dismantle client-side certificate validation by directly modifying the application's code. This step-by-step guide covers the art of decompiling,...

CVE-2026-79298

An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP...

HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software. Update your software...

Linux Distros Unpatched Vulnerability : CVE-2026-89808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Fix the case that vm range is hole at svmmigratecopytovram When migration vm range is hole at cpu sideMIGRATEPFNMIGRATE set + MIGRATEPFNVALID unset...

RHEL 9 : gstreamer1-plugins-base (RHSA-2026:67890)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67890 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

RHEL 8 : libevent (RHSA-2026:67908)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67908 advisory. The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service vi...

MiracleLinux 9 : nginx:1.24 nginx-1.24.0-7.module+el9+1196+3855d771.5.ML.1 (AXSA:2026-1851:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1851:01 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-89888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: i2c: ov02a10: fix endpoint parsing use-after-free The ov02a10checkhwcfg function calls fwnodehandleputep immediately after allocating and parsing the...