GHSA-C8R8-95HG-MP34 SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

Summary kernel/mcp/tools/file.go's resolvePath includes an explicit comment stating its sensitive-path blocklist is meant to align with the HTTP file API's established blacklist refuseToAccess in kernel/api/file.go, following the remediation for GHSA-cvhv-7xhj-xjp8 "Unauthenticated Administrator...

SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

Summary kernel/mcp/tools/file.go's resolvePath includes an explicit comment stating its sensitive-path blocklist is meant to align with the HTTP file API's established blacklist refuseToAccess in kernel/api/file.go, following the remediation for GHSA-cvhv-7xhj-xjp8 "Unauthenticated Administrator...

EUVD-2026-64268

SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files...

YellowKey-WinRE-Remediation

YellowKey WinRE Remediation Intune Remediation package for the CVE-2026-45585 YellowKey BitLocker/WinRE bypass mitigation described in the provided procedure. This package removes autofstx.exe from the offline WinRE image's BootExecute value and refreshes WinRE registration so BitLocker trust is...

EUVD-2026-108262

fpdf2: Exponential SVG '' expansion causes CPU and memory exhaustion in 'FPDF.image'...

GHSA-WQW6-WPR3-45RH fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'

Summary fpdf2 expands SVG references by deep-copying the complete referenced graphics tree. A small SVG can use nested references to make the number of in-memory objects grow exponentially, causing excessive CPU and memory consumption during FPDF.image processing. This was reproduced with an...

fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'

Summary fpdf2 expands SVG references by deep-copying the complete referenced graphics tree. A small SVG can use nested references to make the number of in-memory objects grow exponentially, causing excessive CPU and memory consumption during FPDF.image processing. This was reproduced with an...

GHSA-RW7V-4HRQ-X6R9 fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

Summary fpdf2 implicitly dereferences image resource references supplied to rendering APIs. If an application passes untrusted HTML, SVG, template data, or image paths into those APIs, fpdf2 may issue outbound HTTPS requests or attempt to open local filesystem paths. This behavior is relevant in...

EUVD-2026-108261

fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content...

fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

Summary fpdf2 implicitly dereferences image resource references supplied to rendering APIs. If an application passes untrusted HTML, SVG, template data, or image paths into those APIs, fpdf2 may issue outbound HTTPS requests or attempt to open local filesystem paths. This behavior is relevant in...

CVE-Scanner

CVE-Scanner 🔍 CVE-Scanner is a tool designed to scan and exploit vulnerabilities associated with CVE-2021-42287, CVE-2021-42278, and other security issues. This project aims to provide security professionals and researchers with a straightforward method to identify and mitigate risks in their...

cve-2026-6471-postgres-logical-decoding-dlopen

PostgreSQL CVE-2026-6471: logical decoding dlopen of an arbitrary library PostgreSQL logical decoding lets a non-superuser role that holds the REPLICATION privilege create a logical replication slot and choose the output plugin. On affected versions there is no authorization check on that choice,...

code-graph-rag-PoC

code-graph-rag: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-85gg-2gfq-q95m. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-code-graph-rag-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox...

CVE-2026-90781-alsa-lib-oob

CVE-2026-90781 — alsa-lib OOB Write Reproducer Standalone C reproducer for CVE-2026-90781 , a 1-byte out-of-bounds write in alsa-lib's sndctlasciielemidparse when parsing name= both quoted and unquoted forms. Vulnerability In src/control/ctlparse.c v1.2.16.1 and earlier development HEAD: char...

CVE-2026-117604 Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized that allows unauthenticated visitors to read /clockwork/ profiler data via a loopback REMOTEADDR fallback. Behind a same-host reverse proxy, remote requests appear as loopback, letting...

CVE-2026-117604 Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized that allows unauthenticated visitors to read /clockwork/ profiler data via a loopback REMOTEADDR fallback. Behind a same-host reverse proxy, remote requests appear as loopback, letting...

CVE-2026-117604

The Grav CMS (versions 1.7.53.3 before 1.7.53.6 ) is vulnerable to an authorization bypass in the Debugger::isDebuggerRequestAuthorized() function. This flaw allows unauthenticated visitors to access /__clockwork/ profiler data by exploiting a loopback REMOTE_ADDR fallback . When deployed behind ...

EUVD-2026-110928

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized that allows unauthenticated visitors to read /clockwork/ profiler data via a loopback REMOTEADDR fallback. Behind a same-host reverse proxy, remote requests appear as loopback, letting...

CVE-2026-117604

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized that allows unauthenticated visitors to read /clockwork/ profiler data via a loopback REMOTEADDR fallback. Behind a same-host reverse proxy, remote requests appear as loopback, letting...

pfsense-uploadconfig

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-uploadconfig pfsense-uploadconfig Class: Privilege leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org uploadconfig.php POST config= calls configinstall then systemreboot. IDENT has no...