PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image

Summary The markdowntabletoimage tool accepts a caller-controlled path parameter and passes it directly to gethtmltableimage: python pptagent/mcpserver.py:127-143 def markdowntabletoimagemarkdowntable: str, path: str, css: str - str: """ Args: path str: The file path where the image will be saved...

CVE-2026-0300

creationtimestamp| type| source ---|---|--- 2026-05-05 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/palo-alto-pan-os-remote-code-execution-vulnerability20260506 2026-05-05 23:03:25+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3ml5cayz3of2v 2026-05-06...

CVE-2026-42997

creationtimestamp| type| source ---|---|--- 2026-05-05 17:59:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml4ratvmfr2j 2026-05-05 19:17:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vnfpglw2w 2026-05-05 20:35:31+00:00| seen|...

CVE-2026-43065

creationtimestamp| type| source ---|---|--- 2026-05-05 17:08:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4og5irti2e 2026-07-09 01:17:28+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:23:31+00:00| seen|...

CVE-2026-32689

creationtimestamp| type| source ---|---|--- 2026-05-05 17:00:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4nxphuoq2k 2026-05-08 20:40:28+00:00| seen| https://gist.github.com/alon710/bf727aea4f480d1e2e016713a2841996...

CVE-2026-43073

creationtimestamp| type| source ---|---|--- 2026-05-05 16:46:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4n6tmbqb2e 2026-05-05 17:48:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116523223692989082 2026-05-06 11:10:07+00:00| seen|...

CVE-2026-43059

creationtimestamp| type| source ---|---|--- 2026-05-05 16:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4n2yl25y2v 2026-05-05 17:07:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116523063998425204 2026-07-09 01:17:26+00:00| seen|...

CVE-2026-43067

creationtimestamp| type| source ---|---|--- 2026-05-05 16:42:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4mxfrwuy2h...

GHSA-QVJJ-29QF-HP7P

creationtimestamp| type| source ---|---|--- 2026-05-05 16:40:29+00:00| seen| https://gist.github.com/alon710/f3beac366d11264132c16ea4f9f1b920...

CVE-2026-43063

creationtimestamp| type| source ---|---|--- 2026-05-05 16:40:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4mu25zus2r...

CVE-2026-43072

creationtimestamp| type| source ---|---|--- 2026-05-05 16:38:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4mqus5v22t 2026-07-02 05:51:52+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 05:54:05+00:00| seen...

CVE-2026-7411

creationtimestamp| type| source ---|---|--- 2026-05-05 16:31:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4mefctky2k 2026-05-05 18:43:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4tqy34lp2t 2026-05-06 08:13:41+00:00| seen|...

CVE-2026-6525

creationtimestamp| type| source ---|---|--- 2026-05-05 16:19:36+00:00| seen| https://t.me/cKure/16382...

CVE-2026-35192

creationtimestamp| type| source ---|---|--- 2026-05-05 15:43:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml4jpaa4lk2m...

CVE-2026-43002

creationtimestamp| type| source ---|---|--- 2026-05-05 15:38:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml4jgb2lgf2i...

WordPress Ninja Tables – Easy Data Table Builder plugin <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Table Creation vulnerability discovered by nquangit - Techlab Corporation in WordPress Plugin Ninja Tables versions = 5.2.6...

CVE-2025-65416

creationtimestamp| type| source ---|---|--- 2026-05-05 15:16:16+00:00| seen| https://gist.github.com/ZeroBreach-GmbH/f94cad5b37f718d1b1cfee6ca0fe666b...

CVE-2025-65414

creationtimestamp| type| source ---|---|--- 2026-05-05 15:12:33+00:00| seen| https://gist.github.com/ZeroBreach-GmbH/d8e6a57a5baeaf92b591e5f0de5f0dc2...

CVE-2025-61315

creationtimestamp| type| source ---|---|--- 2026-05-05 15:10:01+00:00| seen| https://gist.github.com/ZeroBreach-GmbH/3ac4a5a17de616a8fa346d604fd34c68...

CVE-2026-42437

creationtimestamp| type| source ---|---|--- 2026-05-05 14:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4gyxc7zt2h 2026-05-05 18:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4rcoj5ey2k...