CVE-2026-57586

CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in coderag/entry/cli.py calls syncdependencies for an indexed path, and coderag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to...

CVE-2026-59971

MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCPTRANSPORT=sse causes src/mysqlmcpserver/server.py to construct SseServerTransport without securitysettings or enablednsrebindingprotection, while the Starlette rout...

CVE-2026-63696

Dell SmartFabric OS10 versions prior to 10.6.1.3 contain a Download of Code Without Integrity Check vulnerability. A high-privileged attacker with remote access could exploit it to achieve arbitrary code execution , with a CVSS v3.1 score of 9.1 (Critical) due to changed scope and high impact on ...

BUK_TS_KILLER

BUKTSKILLER BUK-TS Эксплойт RCE Обход аутентификации — CVE-2026-12183: 1. введите любой пароль 2. перехватите ответ 3. напишите «userid=» 4. обход успешно выполнен Публичный эксплойт для BDU:2025-13914 и CVE-2026-3843...

CVE-2026-39919

Ghostscript before 10.08.0 is affected by a heap-based buffer overflow in the JPEG 2000 output adapter (base/sjpx_openjpeg.c). The root cause is a sizing mismatch: when image components declare different subsampling factors, the non-samescale sub-byte-depth path allocates a row buffer sized for p...

CVE-2026-39919 Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

EUVD-2026-78583

CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in coderag/entry/cli.py calls syncdependencies for an indexed path, and coderag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to...

CVE-2026-57586 CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution

CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in coderag/entry/cli.py calls syncdependencies for an indexed path, and coderag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to...

CVE-2026-57586

CodeRAG (agent-coderag) prior to 1.3.1 contains an Arbitrary Code Execution vulnerability in its default sync flow. When a victim indexes a directory containing build.gradle or build.gradle.kts, the tool unconditionally prefers a repository-controlled gradlew wrapper and executes it via asyncio.c...

CVE-2026-57586 CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution

CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in coderag/entry/cli.py calls syncdependencies for an indexed path, and coderag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to...

CVE-2026-57586 CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution

CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in coderag/entry/cli.py calls syncdependencies for an indexed path, and coderag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to...

follina-msdt-threat-investigation

Follina — Analyse de la menace CVE-2022-30190 Exécution de code à distance zero-day dans Microsoft MSDT — enquête sur une exploitation active par MUHAMMAD ZAWAR KHATTAK 🔗 Voir le rapport complet → 🧪 Scénario Un vendredi soir, l'équipe a été alertée d'une nouvelle vulnérabilité RCE activement...

CVE-2026-48908-joomla-sp-page-builder-detection

CVE-2026-48908 — Validation et détection de Joomla SP Page Builder Validation en laboratoire de CVE-2026-48908 dans le composant Joomla SP Page Builder, axée sur les preuves techniques, la reconstruction des événements et les opportunités de détection défensive. Ce référentiel documente un test...

CVE-2026-59971

CVE-2026-59971 is a CRITICAL (CVSS 10.0) vulnerability in MySQL MCP Server (designcomputer/mysql_mcp_server) prior to version 0.4.2 . When MCP_TRANSPORT=sse is set, the server constructs SseServerTransport without enabling DNS-rebinding protection, exposes unauthenticated Starlette routes (/, /ss...

pentest-writeups

pentest-writeups Writeup Kioptrix Level 1 - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Writeup de test de pénétration Auteur : Amirbek Raxmatullayev @americo444 Date : 2026-06-17 Plateforme : VulnHub Difficulté : Débutant Objectif : Obtenir un accès root 1. Configuration de l'environnement...

CVE-2026-46495

OpenDJ (LDAPv3 directory service) is vulnerable to unauthenticated Remote Code Execution via its JMX RMI connector prior to version 5.1.1 . The root cause is a Deserialization of Untrusted Data (CWE-502) issue: RmiConnector.java processes attacker-controlled credential objects before authenticati...

CVE-2026-56291

Version de balayage automatique et exploitation du CVE-2026-56291 POC Joomla Téléchargement de fichier arbitraire non authentifié menant à une exécution de code à distance RCE dans Balbooa Forms FOFA / Shodan FOFA: body="combaforms" Shodan: http.html:"baforms"...

Vulnerability-Assessment-and-OSINT-CVE-2012-1823

Évaluation de vulnérabilités et OSINT : CVE-2012-1823 Mon dépôt documente le processus d'identification, d'analyse et de collecte de renseignements open source OSINT sur une vulnérabilité de sécurité spécifique détectée lors d'un scan réseau cible. Aperçu du processus Le flux de travail mené au...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-48282-coldfusion-rds-detection

CVE-2026-48282 — Validation et détection de RDS Adobe ColdFusion Validation en laboratoire de CVE-2026-48282 dans les services de développement à distance RDS d'Adobe ColdFusion, axée sur les preuves techniques, la reconstruction d'événements et les opportunités de détection défensive. Ce dépôt...