CVE-2026-78166 provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

CVE-2026-78161

A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function reportrawcbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be...

EUVD-2026-64669

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. T...

EUVD-2026-64667

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archivedrecords.php of the component Restore/Delete. The manipulation of the argument residentid results in authorization bypass. The attack may be launched...

pwninit

pwninit Uno strumento per automatizzare l'avvio di sfide di sfruttamento di binari Caratteristiche Rende eseguibile il binario della challenge Scarica un linker ld-linux.so. in grado di caricare la libc fornita senza causare segfault Scarica i simboli di debug ed esegue l'unstrip della libc Appli...

PT-2026-81012

Name of the Vulnerable Software and Affected Versions mcp-ffmpeg-helper versions 0.1.0 through 0.2.1 Description An OS command injection issue exists within the Tool Handler component, specifically in the handleToolCall function located in the src/tools/handlers.ts file. This occurs when the form...

PT-2026-79806

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description An issue exists in the HTTP Request Handler component where a stack-based buffer overflow occurs. This happens when the strcpy function in the '/goform/aspRemoteApConfTempSend'...

PT-2026-79804

Name of the Vulnerable Software and Affected Versions EFM ipTIME T16000M version 14.20.2 Description Improper authentication occurs within the Session Validation Handler component due to a weakness in the httpcon check session url function. This flaw allows remote exploitation to bypass...

PT-2026-79795

A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report raw cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be...

pub

❤ Sei ein Held, spende ein 🍺 🙂 ⟶ Ƀ : 1AZMeGVfCBbYwVYyG9s79pJDyocTZgiApa | Ξth : 0x438B38E30eF117C15fBfF833f9C2c70182925815 Exploit PoCs und Tools für Schwachstellen, die von tintinweb offengelegt wurden. pub root@kitploit: police line - do not cross ==== police line - do not cross ==== police lin...

CVE-2026-78144

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. T...

CVE-2026-78145 CTFd __init__.py _is_safe_url redirect

A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function issafeurl of the file CTFd/utils/validators/init.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

CVE-2026-78145

CTFd versions up to 3.8.4 are affected by an open redirect vulnerability in the _is_safe_url function within CTFd/utils/validators/__init__.py. A remote attacker with no privileges can manipulate the Next argument to redirect users to an arbitrary URL, requiring only user interaction. The CVSS 3....

CVE-2026-78144 code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. T...

CVE-2026-78144

An authorization bypass vulnerability exists in the Boarder Management Module of code-projects Barangay Resident Profiling Management System 1.0 , specifically in the file /boarders.php. The root cause is improper handling of the ID argument , which can be manipulated to bypass access controls. T...

CVE-2026-78142

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archivedrecords.php of the component Restore/Delete. The manipulation of the argument residentid results in authorization bypass. The attack may be launched...

CVE-2026-78142

CVE-2026-78142 affects code-projects Barangay Resident Profiling Management System 1.0 , an open-source PHP application. The vulnerability resides in the Restore/Delete component of the file /archived_records.php , where manipulation of the resident_id parameter leads to an authorization bypass ....

CVE-2026-78141

A command injection vulnerability exists in Tenda CH22 firmware version 1.0.0.1 . The flaw resides in the function formexeCommand within the file /goform/exeCommand , where unsanitized manipulation of the argument cmdinput allows an attacker to inject arbitrary commands. The attack is remotely ex...

CVE-2026-78140

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...

EUVD-2026-64664

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...