NPM: ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization

NPM: ApostropheCMS: Same-parent page reorder in @apostrophecms/page move re-ranks a restricted parent's children without create authorization vulnerability discovered by ? in WordPress npm apostrophe versions 4.33.0...

CVE-2026-113605

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CVE-2026-113605

Stirling-PDF versions 2.13.2 through 3.2.0 are vulnerable to an H2 SQL Denylist Bypass within the DatabaseService.validateSqlContent() function. Due to an incomplete denylist, authenticated administrators can use the import-database endpoint to upload a crafted SQL backup. By utilizing CREATE OR ...

EUVD-2026-105083

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CVE-2026-113605 Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

EUVD-2026-105150

The Module Manager's block-pool create dispatcher proved that two ALIGNTYPE words of the extra-parameter array a memory-protected module supplies lay inside the module's data, and then used indices 0 through 3 of that array. One of the two unproved words is read by the dispatcher's own buffer...

CVE-2026-94202 Module block-pool create validates two of the four parameter words it reads

The Module Manager's block-pool create dispatcher proved that two ALIGNTYPE words of the extra-parameter array a memory-protected module supplies lay inside the module's data, and then used indices 0 through 3 of that array. One of the two unproved words is read by the dispatcher's own buffer...

CVE-2026-94202

The Module Manager in ThreadX contains an out-of-bounds read vulnerability within the _txm_module_manager_tx_block_pool_create_dispatch function, located in common_modules/module_manager/inc/txm_module_manager_dispatch.h. The issue arises because the block-pool create dispatcher fails to properly...

spark-rest-auth-bypass

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-rest-auth-bypass spark-rest-auth-bypass Class: Privilege leftover Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation Standalone Master REST is default-on port 6066 and never reads...

nextcloud-webhook-tokenneeded

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-webhook-tokenneeded nextcloud-webhook-tokenneeded Nextcloud Server 35.0.0 - Nextcloud GmbH WebhooksController::create nulls tokenNeeded unless the caller is a full instance admin. update does not. A delegate...

CLSA-2026-1792496010 TuxCare security update for @babel/helper-create-class-features-plugin (1 CVE)

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792496006 TuxCare security update for @babel/helper-create-class-features-plugin (2 CVEs)

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792496004 TuxCare security update for @babel/helper-create-class-features-plugin (1 CVE)

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792495997 TuxCare security update for @babel/helper-create-class-features-plugin (1 CVE)

TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CVE-2025-51867

CVE-2025-51867 Vulnerability description Deepfiction AI is an AI entertainment company with a mission to revolutionize personalized storytelling. Deepfiction AI provide a web application to create stories by chatting with LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its ch...

CVE-2026-112777

Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create function because its class-name checks are case-sensitive while PHP class resolution is not. Attackers with template-execution rights, such as Control Panel administrators, can instantiate SplFileObje...

CVE-2021-42392-exploit-lab

⚠️ H2 Database RCE Exploit PoC CVE-2021-42392 This repository provides a minimal and controlled environment to test the H2 Database Remote Code Execution vulnerability CVE-2021-42392 using the CREATE ALIAS feature. Unlike many demonstrations, this exploit targets the H2 TCP service directly...

CVE_6387

This is a Next.js project bootstrapped with create-next-app. Getting Started First, run the development server: npm run dev or yarn dev or pnpm dev or bun dev Open http://localhost:3000 with your browser to see the result. You can start editing the page by modifying app/page.tsx. The page...

CVE-2026-112777 Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE

Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create function because its class-name checks are case-sensitive while PHP class resolution is not. Attackers with template-execution rights, such as Control Panel administrators, can instantiate SplFileObje...

CVE-2026-112777 Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE

Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create function because its class-name checks are case-sensitive while PHP class resolution is not. Attackers with template-execution rights, such as Control Panel administrators, can instantiate SplFileObje...