CVE-2026-103766

ClipBucket versions v5 through 5.5.3-#197 are vulnerable to an SQL injection vulnerability. The issue resides in the admin_area/ads_manager.php file, where authenticated users with ad_manager_access permissions can inject SQL via the delete parameter . By supplying time-based blind payloads conca...

Cyber-Attack-Analysis

Cybersecurity Case Study: The 2020 Virgin Mobile KSA Breach 📌 Executive Summary In 2020, a significant security incident compromised Virgin Mobile KSA, leading to the theft of sensitive data including employee communications and personal information of over 1,000 users. This repository provides a...

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

CVE-2025-4517 — Python tarfile filter="data" Bypass PoC Path traversal vulnerability in Python's tarfile module affecting versions 3.8.0 through 3.13.1. The filter="data" sandbox — intended to prevent unsafe extractions — can be bypassed by crafting paths that exceed PATHMAX 4096 bytes, causing...

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-51894

infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via runmindmap. A reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on that object...

CVE-2026-51893

infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via tracemindmap. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on that object...

CVE-2026-34494

On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63...

CVE-2026-34493

On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...

CVE-2026-104002

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2021-22555-Poc

Heap OVerflow CVE CVE-2021-22555 List of Bugs Heap Out-of-Bounds WriteThe core Bug Data Corruption The Immediate Effect Memory Leak / Information Disclosure Privilege Escalation The Final Goal 1. Install compilation tools do NOT run apt upgrade Download iso wget...

CVE-2026-34494

A vulnerability in the On-Chip Debug Interface of Johnson Controls Neo Series MVP2 (versions before 3.3b63 ) allows an attacker to Collect Data from Common Resource Locations . The issue is associated with CWE-1191 (On-Chip Debug and Test Interface With Improper Access Control). The CVSS 4.0 scor...

CVE-2026-34494

On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63...

CVE-2026-34493

On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...

CVE-2026-34493

A vulnerability in the On-Chip Debug Interface of Johnson Controls EasyIO FS32 (versions before 3.3b63 ) allows an attacker to Collect Data from Common Resource Locations . This issue is associated with CWE-1191 , involving an On-Chip Debug and Test Interface with Improper Access Control . The vu...

CVE-2026-71449

The Johnson Controls EasyIO FS32 software contains a Use of Hard-coded Cryptographic Key vulnerability (CWE-321) affecting versions prior to 3.0b63 . The flaw stems from the use of a fixed secret key for encryption or decryption processes, which enables an attacker to retrieve embedded sensitive ...

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

Extractor

Installation Instructions For Those That Don't Want to Compile Themselves: 1. Download Google's GSON library from Maven http://central.maven.org/maven2/com/google/code/gson/gson/2.8.2/gson-2.8.2.jar wget http://central.maven.org/maven2/com/google/code/gson/gson/2.8.2/gson-2.8.2.jar 2. In Burp's...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2026-104002

The data masking utility in Powertools for AWS Lambda (Python) is vulnerable to a fail-open error handling issue in versions prior to 3.35.0 . This flaw allows actors to read sensitive field values that the application intended to mask because the system continues to operate rather than denying a...