358577 matches found
OASAS
OASAS - Offensive Automation & Scope-Aware Suite Very p...
WordPress Database for Contact Form 7, WPforms, Elementor forms plugin < 1.5.5 - Authenticated SQL Injection via id Parameter vulnerability
Authenticated SQL Injection via id Parameter vulnerability discovered by Andrew Lyons in WordPress Plugin Contact Form Entries versions 1.5.5...
GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
SummaryMultiple GeoLens read/link endpoints authorized only the resource named in therequest URL a map, a VRT, a source dataset, an AI request and failed tore-authorize a second, caller-influenced dataset that the request reachedthrough a relationship, layer reference, mosaic source, or request...
PYSEC-2026-3662 GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
Summary Multiple GeoLens read/link endpoints authorized only the resource named in the request URL a map, a VRT, a source dataset, an AI request and failed to re-authorize a second, caller-influenced dataset that the request reached through a relationship, layer reference, mosaic source, or reque...
PYSEC-2026-3663 GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
Summary Multiple GeoLens read/link endpoints authorized only the resource named in the request URL a map, a VRT, a source dataset, an AI request and failed to re-authorize a second, caller-influenced dataset that the request reached through a relationship, layer reference, mosaic source, or reque...
GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
SummaryMultiple GeoLens read/link endpoints authorized only the resource named in therequest URL a map, a VRT, a source dataset, an AI request and failed tore-authorize a second, caller-influenced dataset that the request reachedthrough a relationship, layer reference, mosaic source, or request...
MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`
Stata Command Injection via Unsanitized package in adopackageinstall SummaryThe adopackageinstall MCP tool in stata-mcp concatenates user-controlled input directly into a Stata command string without any validation or sanitization. An attacker who can invoke the MCP tool or the equivalent Python...
Glances: REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard
SummaryGlances's REST API server includes a documented safety check intended to guarantee that corscredentials=True can never be combined with an unrestricted CORS origin allowlist. The check compares the configured origin list to the wildcard using exact list equality corsorigins == "" instead o...
vLLM: Completion prompt lists fan out into unbounded engine requests
SummaryThe /v1/completions request model accepts prompt as a list of text prompts or a list of token-id prompts without any outer prompt-count bound. The serving path turns each element into a separate engine input, creates one engine generator per element, merges all generators, and allocates a...
PYSEC-2026-3700 MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`
Stata Command Injection via Unsanitized package in adopackageinstall Summary The adopackageinstall MCP tool in stata-mcp concatenates user-controlled input directly into a Stata command string without any validation or sanitization. An attacker who can invoke the MCP tool or the equivalent Python...
PYSEC-2026-3667 Glances: REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard
Summary Glances's REST API server includes a documented safety check intended to guarantee that corscredentials=True can never be combined with an unrestricted CORS origin allowlist. The check compares the configured origin list to the wildcard using exact list equality corsorigins == "" instead ...
PYSEC-2026-3704 vLLM: Completion prompt lists fan out into unbounded engine requests
Summary The /v1/completions request model accepts prompt as a list of text prompts or a list of token-id prompts without any outer prompt-count bound. The serving path turns each element into a separate engine input, creates one engine generator per element, merges all generators, and allocates a...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9558: MDR: Post-upgrade 4.21 to 4.22 DRPolicy validation failure in Metro DR DFBUGS-9404: Backport to...
SUSE-SU-2026:3649-1 Security update for python313
This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. - CVE-2025-15367: control characters may allow the injection of additional commands bsc1257041. - CVE-2026-0864: improper handling of...
Security update for python313
This update for python313 fixes the following issues: CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. CVE-2025-15367: control characters may allow the injection of additional commands bsc1257041. CVE-2026-0864: improper handling of...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.43 security and extras update
Red Hat OpenShift Container Platform release 4.19.43 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...
secator v0.42.0
The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...
Malicious code in gfff5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f12f82dc8c54282b428617c03537a54f3361841b02233b6626eae6f1e8ec4ee gfff5 advertises itself as a 'System binary configuration tool' but its actual behavior is covert surveillance. When the CLI is invoked, index.js...
MAL-2026-14296 Malicious code in gfff5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f12f82dc8c54282b428617c03537a54f3361841b02233b6626eae6f1e8ec4ee gfff5 advertises itself as a 'System binary configuration tool' but its actual behavior is covert surveillance. When the CLI is invoked, index.js...
Malicious code in homekit-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aae79beeec5e53410060b09eae14979ac2c1f27c62da6b750a612651f8ea8fe The package is published under a HomeKit/MCP-suggestive name but contains no HomeKit or MCP functionality. lib/report.js resolves the installer's ema...