Cross-site Scripting (XSS)

Overview @adonisjs/http-server is an AdonisJS HTTP server with support packed with Routing and Cookies Affected versions of this package are vulnerable to Cross-site Scripting XSS through the default HTML error rendering in ExceptionHandler.handle. An attacker can execute arbitrary JavaScript in ...

installer v13.31.1

Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...

Exploit for CVE-2026-65883

CVE-2026-65883 — Aimy Captcha-Less Form Guard clfgd Field → XOR...

Cross-site Scripting (XSS)

Overview clevertap-web-sdk is a Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderCustomHtml function of src/util/campaignRender/nativeDisplay.js, which assigns the display.details0.html field from an incoming postMessage to element.innerHTML without...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the parseAssay method in ISArchiveParser.java. An attacker can read arbitrary files accessible to the Tika process by supplying a Study Assay File Name value in an ISA-Tab investigation file that points outside t...

Exploit for Classic Buffer Overflow in Rsyslog

CVE-2022-24903 Hands-On Lab Author: Andrew Beshay Mousa...

Exploit for CVE-2026-66066

rails-forensics-CVE-2026-66066 Tooling and method for answeri...

Exploit for Unrestricted Upload of File with Dangerous Type in Rsjoomla Rsfiles\!

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File...

xalgorix v4.5.119

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

Exploit for CVE-2026-61424

CVE-2026-61424 — DJ-Classifieds imageupload Task → No Auth → 3-...

CVE-2026-66415

Leantime 3.6.2 contains a server-side request forgery and local file inclusion vulnerability that allows authenticated attackers to read internal resources by passing unsanitized user-supplied filenames to filegetcontents in the Blueprints::import method without path validation. Attackers can...

agentic-threat-hunting-framework v0.17.0

Agentic Threat Hunting Framework ATHF Quick Start • Installation • Documentation • Examples Give your threat hunting program memory and agency. The Agentic Threat Hunting Framework ATHF is the memory and automation layer for your threat hunting program. It gives your hunts structure, persistence,...

Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issue CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit established, which can lead to DoS when specially crafted DNS packets are parsed bsc1272214. Patch Instructions: To install this SUSE update use the...

SUSE-SU-2026:3431-1 Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issue - CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit established, which can lead to DoS when specially crafted DNS packets are parsed bsc1272214...

[SECURITY] [DLA 4706-1] ruby-rack security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4706-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA July 31, 2026 https://wiki.debian.org/LTS -...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in jackson-databind

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in jackson-databind. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

Security Bulletin: Multiple Security vulnerabilities impacting watsonx.data integration

Summary Multiple Security vulnerabilities impacting watsonx.data integration. These vulnerabilities have been addressed and customers should update to version 5.3.1 at the earliest opportunity. Vulnerability Details CVEID:CVE-2026-33151 DESCRIPTION: Socket.IO is an open source, real-time,...

Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed in IBM Business Automation Manager Open Editions 9.5.1 Vulnerability Details CVEID:CVE-2026-11525 DESCRIPTION: Impact: When undici parses a Set-Cookie header, it accepts an...

SUSE CVE-2026-28741

Mattermost versions 10.11.x = 10.11.12, 11.5.x = 11.5.0, 11.4.x = 11.4.2, 11.3.x = 11.3.2 fail to validate CSRF tokens on an authentication endpoint which allows an attacker to update a user's authentication method via a CSRF attack by tricking a user into visiting a malicious page. Mattermost...