EulerOS 2.0 SP13 : cpio (EulerOS-SA-2026-4037)

According to the versions of the cpio packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack...

EulerOS 2.0 SP13 : cpio (EulerOS-SA-2026-4128)

According to the versions of the cpio packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack...

CVE-2026-107430: Missing Authorization

Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VideoWhisper Site Manager for ChatGPT, Claude, Codex: from n/a through...

PT-2026-110556

Name of the Vulnerable Software and Affected Versions TDuck survey form versions prior to 6.1 Description Broken access control allows authenticated users to add fields to forms belonging to other users. By sending a request to the endpoint "POST /user/form/item/batch/create", an attacker can...

PT-2026-110818

Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...

PT-2026-110749

Network-AI npm network-ai before 5.15.2 contains an origin validation error in McpSseServer. handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page with...

PT-2026-110796

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...

PT-2026-118148

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE связана с недостатками механизма разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ на изменение и удаление произвольных данных...

CVE-2026-109329: Authorization Bypass Through User-Controlled Key

Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations. Attackers can submit crafted assign requests to membersassignment.php with a foreign role UUID to gain privileged...

CVE-2026-61994: Missing Authorization

Missing Authorization vulnerability in RocketGeek WP-Members wp-members allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Members: from n/a through 3.5.7...

CVE-2026-21117: Improper Access Control

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-85947: Improper Privilege Management

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations. A remote attacker with forest-management privileges could exploit this flaw to create a persistent unauthorized administrator account,...

PT-2026-110446

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...

CVE-2026-106495: Improper Access Control

Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper access control in backend action invocation. An authenticated user could invoke actions that an operator had excluded through action configuration...

ROS-20261012-73-0199

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-21118: Improper Access Control

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures. FREE EMBEDDED HACKING COURSE PROMO HERE Join DC540 Discord HERE Today's Tutorial October 11, 2026 Lesson 322: Embedded Hacking Course Chapter 40: Hacking Functions, w...

conpot

Conpot Acerca de Conpot es un honeypot de ICS con el objetivo de recopilar inteligencia sobre los motivos y métodos de los adversarios que atacan sistemas de control industrial. Documentación La documentación se puede encontrar aquí. Si solo está probando conpot, le sugerimos que vaya a instalaci...

obfuscation_detection

Detección de Ofuscación v2.4 Autor: Tim Blazytko Detectar automáticamente código ofuscado y otras construcciones de código interesantes Descripción: Obfuscation Detection es un plugin de Binary Ninja para detectar código ofuscado y construcciones de código interesantes por ejemplo, máquinas de...

nomore403

NoMore403 nomore403 es una herramienta de línea de comandos para probar bypass de control de acceso HTTP e inconsistencias en analizadores alrededor de respuestas 401, 403 y relacionadas. La herramienta está diseñada para trabajo práctico en seguridad web: bug bounty, pruebas de penetración,...