Security Bulletin: Multiple Security Vulnerabilities Addressed in IBM Tivoli Netcool Configuration Manager(ITNCM) Version 6.4.2 Fix Pack 25 (6.4.2.25).

Summary Multiple security vulnerabilities have been addressed in IBM Tivoli Netcool Configuration ManagerITNCM Version 6.4.2 Fix Pack 25 6.4.2.25. The vulnerabilities affect components including Apache Log4j, Eclipse OpenJ9, Java SE, Apache Ant, and SSH implementations. Vulnerability Details...

CVE-2026-103507

Perforce P4 Search versions prior to 2026.4.2 are vulnerable to an arbitrary file-write flaw because the software fails to restrict file paths through its logging configuration interface . An attacker possessing a service authentication token can write arbitrary files to the host, which may lead ...

CVE-2026-103507 Arbitrary file-write via log configuration path in P4Search

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

CVE-2026-103507 Arbitrary file-write via log configuration path in P4Search

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

EUVD-2026-92299

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

CVE-2026-104808 Mitel MiVoice Office 400 stored Cross-Site Scripting

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening...

CVE-2026-104807 Mitel MiVoice Office 400 stored Cross-Site Scripting

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into the web application. The specific flaw exists within the web portal listening on TCP port 443, under Configuration → Domain...

EUVD-2026-92296

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into the web application. The specific flaw exists within the web portal listening on TCP port 443, under Configuration → Domain...

CVE-2026-104807

The Mitel MiVoice Office 400 web portal is vulnerable to a stored Cross-Site Scripting (XSS) flaw (CWE-79). The issue resides in the Configuration → Domains section, specifically within the "Description" field, where the application fails to properly validate or sanitize user-supplied input befor...

SUSE-SU-2026:4441-1 Security update for kubevirt-1.6

This update for kubevirt-1.6 fixes the following issues: - Package the persistent-reservation helper's entrypoint script bsc1276520: virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into place and then execs qemu-pr-helper. Only...

Configuration Bypass

Apache Kyuubi is vulnerable to configuration bypass. The vulnerability is due to an incomplete security fix, where client‑controlled unprefixed Spark config aliases can bypass the server‑side kyuubi.session.local.dir.allowlist setting and attackers can exploit it by accessing the Kyuubi Server vi...

wazuh-nginx-cve-2026-42945-sca-lab

CVE-2026-42945 — NGINX Wazuh SCA Defensive Lab Overview This repository documents a defensive lab for CVE-2026-42945 , affecting the NGINX ngxhttprewritemodule. The goal of this project was to approach the CVE from a blue-team perspective by using Wazuh Security Configuration Assessment SCA to...

CVE-2023-23752

CVE-2023-23752 - Recurrence of Joomla Unauthorized Access Vulnerability Script Usage Install python libraries pip install -r requirements.txt Vulnerability Verification python3 CVE-2022-26134check.py -u url -c whoami Batch Scan python3 CVE-2023-23752.py -f urlpart.txt Affected Versions 4.0.0 =...

web-server-audit_CVE-2026-42945

webserveraudit Don't ask if you're vulnerable. Ask if you're exploitable. A single-file Python tool that audits nginx and Apache against known CVEs by checking both the installed version and whether the vulnerable code path is actually reachable through your configuration. Why? Most CVE scanners...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...

cve-2021-41773

CVE-2021-41773 – Apache Path Traversal Report Summary Vulnerability found in Apache HTTP Server 2.4.49 that can expose sensitive files on the system through a Path Traversal attack depending on the web server configuration Path Traversal: An attacker can access files outside the web root using...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

Guía de Escalada de Privilegios CVE-2025-6018 + CVE-2025-6019 中文 📋 Pasos Rápidos de Explotación Paso 1: Preparar la Imagen XFS Máquina Local Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image...

CVE-2026-105294

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. Attackers exploiting a Discord XSS can set additionalArguments to persistently add --proxy-server and...

CVE-2026-105294

Legcord versions 1.1.0 through 1.3.0 are vulnerable to a configuration injection vulnerability via the window.legcord settings.setConfig bridge. This flaw allows scripts running on the Discord page to write arbitrary configuration keys. If an attacker leverages a Discord XSS , they can modify add...

CVE-2026-105294 Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. Attackers exploiting a Discord XSS can set additionalArguments to persistently add --proxy-server and...