CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...

CVE-2026-105139

Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...

CVE-2026-105139 Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources

Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...

CVE-2026-105139

The Obot platform (versions 0.26.0 before 0.26.2 ) contains an authorization bypass vulnerability. The root cause is that vMCP profiles were only enforced on tools, failing to restrict access to other elements. This allows authenticated users matching any vMCP profile to access prompts , resource...

EUVD-2026-94310

Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...

propox

Propox 🛡️🚀 Propox एक उच्च-प्रदर्शन, सुरक्षित और अवलोकनीय HTTP/HTTPS प्रॉक्सी है जो Rust में लिखा गया है। इसे उच्च-थ्रूपुट ट्रैफ़िक को संभालने के लिए डिज़ाइन किया गया है, साथ ही उन्नत सुरक्षा तंत्रों का उपयोग करके दुरुपयोग करने वाले क्लाइंट से सक्रिय रूप से बचाव करता है। ✨ मुख्य विशेषताएँ 🚀 अत्यधिक...

PT-2026-107680

Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 2.0.0 through 3.0.13 Description Connection-pool partitioning omits identity-defining fields for Kerberos, SPNEGO, NTLM, and authenticated proxy connections. This allows logins without a configured principal, proxy...

PT-2026-107685

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, the HTTP/1.1 connection-pool key excludes the authenticated principal for connection-oriented NTLM and Negotiate authentication. A pooled...

PT-2026-107682

Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions prior to 3.0.12 AsyncHttpClient versions prior to 2.16.1 Description The library incorrectly infers the existence of an HTTP proxy tunnel based on the last request method instead of the result of the CONNECT request. I...

PT-2026-107671

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

Exploit for Missing Authentication for Critical Function in Apache Artemis

CVE-2026-57967 — Apache ActiveMQ Artemis Unauthenticated Sessi...

dovecot: Dovecot: Denial of Service and potential message duplication via connection limit exhaustion

A flaw was found in the Dovecot mail server's submission-login component. This vulnerability occurs when the server reaches its maximum allowed user IP connections, leading to a crash due to file descriptor handling issues. This can result in a denial of service, preventing users from sending...

CVE-2019-14224

CVE-2019-14224: تنفيذ التعليمات البرمجية عن بُعد بعد المصادقة في Alfresco Community من خلال استغلال مكوّنات متعددة في تطبيقات Alfresco Software، لوحظت سلسلة استغلال تسمح للمهاجم بتحقيق تنفيذ التعليمات البرمجية عن بُعد. يجب على المهاجم استخدام Alfresco من أجل: رفع ملفات إعداد Solr الخبيثة إلى موقع...

CVE-2026-57850

Summary RustDesk sessions are authorized for a specific connection type — Remote full desktop control, FileTransfer, PortForward, ViewCamera, or Terminal. Before 1.4.9, the server's post-authorization message gate only checked one boolean, self.authorized, and never re-checked it against the...

CVE-2026-48282-coldfusion-rds-detection

CVE-2026-48282 — Adobe ColdFusion RDS التحقق والكشف التحقق المخبري لـ CVE-2026-48282 في خدمات التطوير عن بُعد RDS من Adobe ColdFusion، مع التركيز على الأدلة التقنية، إعادة بناء الأحداث، وفرص الكشف الدفاعية. يُوثق هذا المستودع اختبارًا مضبوطًا تم فيه استخدام وظيفة FILEIO الثغرة في RDS لكتابة ملف C...

AZL-106353 CVE-2026-98255 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...

CVE-2026-25253

CVE-2026-25253 OpenClaw 1-Click RCE ★ CVE-2026-25253 OpenClaw 1-Click Exécution de Code à Distance PoC ★ https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e Description CVE-2026-25253 : Vulnérabilité d'exfiltration de jeton d'authentification OpenClaw description:...

CVE-2026-98357

In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isertsenddone hands ISTATESENDTASKMGTRSP, ISTATESENDREJECT and ISTATESENDTEXTRSP completions off to isertcompwq and returns. The work item then...

CVE-2026-98320

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: hold reference on ct until flow is released nfctput releases the ct-ext area inmediately, the rcu typesafe semantics also allow to refer to the wrong conntrack from the flowtable datapath. Hold reference on ...

EUVD-2026-93183

In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...