CVE-2026-105487

A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomaindiscovery of the file web/reNgine/tasks.py of the component listTargets Endpoint. The manipulation of the argument Name results in os command injection. The attack can be launched...

ZenML ZenML Server - Improper Authentication

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. id: CVE-2024-25723 info:...

gitlab_rce_cve-2022-2884

gitlabrcecve-2022-2884 Это программа на Python3, которая эксплуатирует аутентифицированную RCE-уязвимость GitLab, известную как CVE-2022-2884. ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ Этот инструмент предназначен для специалистов по безопасности и AppSec для проведения оценок безопасности. Пожалуйста, используйт...

CVE-2026-105487

The yogeshojha reNgine software (versions up to 2.2.0 ) is vulnerable to an OS command injection vulnerability within the listTargets Endpoint . Specifically, the subdomain_discovery function located in the web/reNgine/tasks.py file fails to properly neutralize the Name argument. This flaw allows...

CVE-2026-105487 yogeshojha reNgine listTargets Endpoint tasks.py subdomain_discovery os command injection

A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomaindiscovery of the file web/reNgine/tasks.py of the component listTargets Endpoint. The manipulation of the argument Name results in os command injection. The attack can be launched...

EUVD-2026-92917

A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomaindiscovery of the file web/reNgine/tasks.py of the component listTargets Endpoint. The manipulation of the argument Name results in os command injection. The attack can be launched...

CVE-2026-105487 yogeshojha reNgine listTargets Endpoint tasks.py subdomain_discovery os command injection

A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomaindiscovery of the file web/reNgine/tasks.py of the component listTargets Endpoint. The manipulation of the argument Name results in os command injection. The attack can be launched...

Spring-Cloud-Gateway-CVE-2022-22947

Spring-Cloud-Gateway-CVE-2022-22947 Уведомление об уязвимости удаленного выполнения кода в Spring Cloud Gateway. Эта уязвимость позволяет выполнить инъекцию кода в приложения, использующие Spring Cloud Gateway, если включена и доступна конечная точка Gateway Actuator. Злоумышленник может отправит...

watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253 Splunk RCE до аутентификации Инструмент генерации артефактов обнаружения уязвимости Splunk Pre-Auth RCE 1day Обнаружение в действии Инструмент генерации артефактов обнаружения пытается получить доступ к конечной точке /v1/postgres/recovery/backup службы PostgreSQL Sidecar Service,...

CVE-2023-35078

CVE-2023-35078 shodan dorks Vous pouvez utiliser les shodan dorks suivants pour trouver des cibles publiques. http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs Vous pouvez utiliser la commande suivante pour transformer les données de l'API shodan dans un format adapté au script d...

exposecheck

EXPOSECHECK N'exécutez que sur des serveurs que vous possédez ou que vous êtes autorisé à tester. Portée : un résultat positif signifie uniquement que cette vérification étroite a trouvé un défi d'authentification et une version de Langflow égale ou supérieure au seuil corrigé pour CVE-2025-3248...

EUVD-2026-92841

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

EUVD-2026-92840

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...

CVE-2026-105754

A flaw was found in vLLM. The scale-out inference service fails to properly validate caller-supplied multimodal parameters, such as image geometry and cache identifiers, against the active model's configuration. An authenticated remote attacker can exploit this vulnerability by submitting crafted...

PT-2026-106360

Name of the Vulnerable Software and Affected Versions Cloud Foundry UAA affected versions not specified Description Improper authentication in the OAuth token endpoint allows a remote, authenticated attacker with a valid user access token to obtain a fully-privileged client credentials token for...

PT-2026-106719

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql query of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password resul...

PT-2026-106792

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control...

CVE-2026-59788

The email media type OAuth form passes the Authorization endpoint valu...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenStack Aodh and Watcher vulnerability (USN-8870-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8870-1 advisory. Chen YuXiang discovered that OpenStack Aodh did not correctly enforce project scoping in its alarm list API and that the...

PT-2026-106712

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysql error of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The atta...