WD NAS - language_configuration RCE Detection (CVE-2018-18472)

Detects CVE-2018-18472 by injecting id via PUT /api/1.0/rest/languageconfiguration backticks and fetching the written output file. !/usr/bin/env python3 -- coding: utf-8 -- """Western Digital My Cloud / My Book Live languageconfiguration RCE CVE-2018-18472.""" import re from kittysploit import fr...

Spring Cloud Gateway - Actuator SpEL RCE Detection (CVE-2022-22947)

Detects CVE-2022-22947 by creating a Gateway route with a SpEL AddResponseHeader filter via /actuator/gateway/routes, refreshing, and reading command output from the route definition. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Cloud Gateway Actuator SpEL RCE CVE-2022-22947.""" import jso...

Spring Cloud Gateway - Actuator SpEL RCE (CVE-2022-22947)

Exploits CVE-2022-22947 by injecting SpEL into a Gateway route filter via the actuator API, reading command output from the route JSON. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Spring Cloud Gateway Actuator SpEL RCE CVE-2022-22947 — opens execute...

Akamai Cloud Keeps Strengthening the Foundation (Updated August 2026)

...

Nimbus Vestige — Updated!

Nimbus Vestige NV A forensic reconstruction engine for cloud and identity incident response. Given fragmented cloud, SaaS, and identity telemetry — control-plane logs, sign-in events, token and consent activity — NV reconstructs how an intrusion most likely moved across accounts and services,...

PT-2026-69954

Name of the Vulnerable Software and Affected Versions odh-model-controller affected versions not specified Description An authenticated user with permissions to create custom resources can exploit a flaw in the loadSecret function. The function improperly reads the Secret namespace from...

CVE-2026-72692: Missing Authorization

A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes...

CVE-2026-72691: Authentication Bypass Using an Alternate Path or Channel

An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...

CVE-2026-72688: Missing Authentication for Critical Function

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTERKEY-signed file access tokens for any caller-supplied URL without...

PT-2026-69829

Name of the Vulnerable Software and Affected Versions opensignserver versions prior to 2.37.1 Description A missing authentication issue allows an unauthenticated remote attacker to read arbitrary stored documents. This occurs via the fileupload Parse cloud function, which generates file access...

PT-2026-69833

Name of the Vulnerable Software and Affected Versions opensignserver versions prior to 2.37.1 Description A missing authorization issue allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user. This is possible...

PT-2026-76478

Summary Open WebUI fetches user-supplied URLs on the server for RAG URL ingestion, URL-to-markdown conversion and web-search content retrieval, and decides whether a destination is allowed by asking whether its IP address is globally routable. That test operates on the literal IPv6 address and do...

Alibaba Cloud Linux 3 : 0242: compat-libtiff3 (ALINUX3-SA-2026:0242)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0242 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-12912: A flaw was found in libtiff. A remo...

Alibaba Cloud Linux 3 : 0238: libreswan (ALINUX3-SA-2026:0238)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0238 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-12413: An invalidly formatted IKE...

Alibaba Cloud Linux 3 : 0247: php:7.4 (ALINUX3-SA-2026:0247)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0247 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-14355: In PHP versions 8.2. before 8.2.32,...

Alibaba Cloud Linux 3 : 0245: dovecot (ALINUX3-SA-2026:0245)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0245 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-42006: An attacker can cause uncontrolled...

Alibaba Cloud Linux 3 : 0244: libgcrypt (ALINUX3-SA-2026:0244)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0244 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-41989: Libgcrypt before 1.12.2 sometimes...

Nightmare-Windows-0-day-exp

Windows Zero-Day Exploit Collection !Research Use Onlyhtt...

What SecureIQLab Cloud WAAP 5.0 means for your application security

You cannot verify a vendor’s security claims from their own datasheet, including ours. That is why independent validation matters. In our recent guide to the best WAAP solutions Best WAAP Solutions 2026: Enterprise Buyer Guide, we argued that every serious shortlist should include independent...

CVE-2026-19339

CVE-2026-19339 affects the Alibaba Cloud/DataWorks MCP server (aliyun alibabacloud-dataworks-mcp-server) up to version 1.0.43. The vulnerability is in ReadResourceRequestSchema (src/resources/initResources.ts): manipulating the argument request.params.uri enables server-side request forgery (SSRF...