5103 matches found
EUVD-2026-57965
Unauthenticated Cross Site Scripting XSS in Knowledge Base for Documentation, FAQs with AI Assistance = 17.211.0 versions...
Security Bulletin: IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
Summary IBM Documentation Offline is a desktop application that bundles an Electron-based viewer and an embedded Node.js web server to serve product documentation locally on the user's workstation. Multiple vulnerabilities have been identified in the embedded server component spanning three...
PT-2026-71849
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory...
CVE-2026-16713: Binding to an Unrestricted IP Address
IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...
CVE-2026-17468: Use of Hard-coded Cryptographic Key
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key...
PT-2026-71852
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths...
PT-2026-71851
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...
CVE-2026-28187: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Knowledge Base for Documentation, FAQs with AI Assistance = 17.211.0 versions...
CVE-2026-17481: Improper Output Neutralization for Logs
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...
PT-2026-71807
Name of the Vulnerable Software and Affected Versions IBM Documentation Offline versions 1.0.0 through 1.4.1 Description A security misconfiguration in the documentation server allows it to bind to an unrestricted IP address, which could enable a remote attacker to obtain sensitive information...
CVE-2026-17482: External Control of File Name or Path
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths...
CVE-2026-17473: Improper Limitation of a Pathname to a Restricted Directory
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory...
PT-2026-71848
Name of the Vulnerable Software and Affected Versions IBM Documentation Offline versions 1.0.0 through 1.4.1 Description A remote attacker can forge valid session tokens because the software uses a hardcoded cryptographic key. A hardcoded cryptographic key is a fixed secret embedded directly into...
cyberange
大家好，我就是那个B站里面的用Kali学渗透。本仓库是网络安全渗透测试学习与训练靶场，包含Web漏洞靶场、渗透工具脚本、攻防手册等。内含：邻里圈靶场16+隐藏漏洞，含SQL注入/XSS/命令注入/文件上传/路径遍历等、零依赖渗透脚本、全工具链渗透脚本、PHP/CGI木马、反向Shell、密码破解工具、蜜罐防御系统、Metasploit精简版、Hacker OS一键构建脚本，以及DVWA攻防手册、Kali工具手册、recon-ng手册等学习文档。适合网络安全入门学习和CTF备赛参考。...
CVE-2026-73295
Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...
MINI-JGQ9-6562-9HRH
Bulletin has no description...
CVE-2026-19375
A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...
[SECURITY] Fedora 43 Update: python3.12-3.12.13-6.fc43
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...