CVE-2026-21962

CVE-2026-21962 — Oracle HTTP Server / WebLogic Server Proxy Plug-in Access-Control Bypass via URI Normalization Inconsistency An independently reproduced exploit and analysis for CVE-2026-21962 improper access control, CVSS 10.0 in Oracle HTTP Server / the Oracle WebLogic Server Proxy Plug-in for...

CVE-2026-22679

CVE-2026-22679: ثغرة تنفيذ كود عن بُعد غير مصادق عليها في Weaver E-cology عبر نقطة تصحيح dubboApi -critical TL;DR يحتوي Weaver E-cology 10.0 قبل الإصدار 20260312 على ثغرة حرجة لتنفيذ كود عن بُعد غير مصادق عليها في نقطة النهاية /papi/esearch/data/devops/dubboApi/debug/method. يمكن للمهاجمين حقن...

FortiSandbox-RCE-Exploit-CVE-2026-39808

FortiSandbox RCE Scanner — CVE-2026-39808 Unauthenticated OS Command Injection as root in Fortinet FortiSandbox Vulnerability • Installation • Usage • How It Works • Pipeline • Shodan Dorks • Disclaimer Vulnerability CVE-2026-39808 is a critical unauthenticated OS command injection vulnerability ...

CVE-2026-44402

CVE-2026-44402 تنفيذ أوامر كامل عن بُعد قبل المصادقة في Voltronic Power SNMP Web Pro 1.1 المحتوى البائع المتأثر: https://voltronicpower.com/ المنتج المتأثر: SNMP Web pro 1.1 يحتوي SNMP Web Pro 1.1 على ثغرة تنفيذ تعليمات برمجية عن بُعد بدون مصادقة في نقطة النهاية upload.cgi. تتيح وظيفة تحديث...

CVE-2026-1953

CVE-2026-1953 | Stored XSS — Nukegraphic CMS v3.1.2 Overview A Stored Cross-Site Scripting XSS vulnerability exists in Nukegraphic CMS v3.1.2. The issue allows an authenticated user to inject malicious JavaScript into the profile name field, which is stored in the backend database and executed...

CVE-2026-84377

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination the user controls and cause the proxy to send its configured provider credentials t...

CVE-2025-60423

Authentication Bypass: 7.2.8 This authentication bypass is similar to Shiro's permission bypass. In the dofilterInternal method of the sessionfilter class, the default dofilter parameter is true, and only when it is false can authentication be bypassed. Following into the matches method, this cod...

CVE-2026-49831

DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.3, and 10.0, the Curation Task feature allows an output path to be used by the reporter -r parameter, typically used to stream results and status of curation...

KOOBE-Guard

KOOBE-Guard: Active Temporal Mitigation of Kernel Double-Free Vulnerabilities Authors: Vedant Karande & Kiran Kumari Course: Network & Systems Security SIL7165 - Indian Institute of Technology Delhi Overview KOOBE-Guard is a dynamic Intrusion Prevention System IPS developed as a Linux Loadable...

POC-CVE-2026-63030-CVE-2026-60137-

PoC: WP2Shell — CVE-2026-63030 & CVE-2026-60137 -red?style=for-the-badge 📌 Overview WP2Shell is a critical exploit chain in WordPress Core source code that allows a remote unauthenticated attacker to gain full control of the server Full Server Takeover / RCE. The exploit chain combines two securi...

PyPsPipeJack

PyPsPipeJack This tool is the continuation of my other tool, OpenPsPipeJack. This one is python based and works on Linux largely using Impacket. In summary, if you have local admin on a remote host, you can connect to remote PowerShell sessions on that host and execute commands within those...

CVE-2026-42568

CVE-2026-42568 — YAMCS LDAP Injection in LdapAuthModule Summary An LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule. The username parameter is inserted directly into LDAP search filters without RFC 4515 escaping, allowing authentication bypass...

CVE-2026-9082

Drupal CVE-2026-9082 Scanner Semi-passive scanner that detects Drupal installations potentially vulnerable to CVE-2026-9082 PostgreSQL SQL injection. No SQL payloads sent. No state-changing requests. Vulnerable Versions Branch| Affected| Fixed ---|---|--- 10.4.x| 8.9.0 — 10.4.9| 10.4.10 10.5.x|...

CVE-2026-84377 LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination the user controls and cause the proxy to send its configured provider credentials t...

CVE-2026-84377 LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination the user controls and cause the proxy to send its configured provider credentials t...

EUVD-2026-70236

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination the user controls and cause the proxy to send its configured provider credentials t...

CVE-2026-84377

LiteLLM (an AI Gateway/proxy server for LLM APIs) is affected by an authenticated SSRF and provider-credential exfiltration vulnerability prior to versions 1.88.6 and 1.96.2 . The root cause lies in incomplete request validation across multiple proxy files (auth_utils.py, common_request_processin...

CVE-2026-84377 LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination the user controls and cause the proxy to send its configured provider credentials t...

CVE-2026-79756

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...

CVE-2026-49831 DSpace: Curation Task Reporter output path is not restricted to trusted directories (Path Traversal Vulnerability)

DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.3, and 10.0, the Curation Task feature allows an output path to be used by the reporter -r parameter, typically used to stream results and status of curation...