Astra Linux – Vulnerability in Twisted

Twisted is an event-driven networking engine written in Python. In affected versions, Twisted exposes cookies and authorization headers when performing cross-origin redirects. This issue is present in the twited.web.RedirectAgent and twisted.web.BrowserLikeRedirectAgent functions. Users are advis...

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2 A critical RCE vulnerability in MCPJam Inspector 3.Start the exploit root@kitploit: python3 CVE-2026-23744.py -u -i -p 4.For better usage I recomend to update the terminal to a fully funcional one , otherwise u wont be able to use commands like ctrl^...

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

CVE-2026-90895

Affected versions of MISP’s interactive CLI shell implement access control independently from the normal web application, causing several authorization inconsistencies. The patch shows that CLI access could differ from the web application in multiple security-sensitive areas: - feed listings did...

POC_CVE-2026-42880

CVE-2026-42880 — ArgoCD Secret Exposure via ServerSideDiff A lab environment for reproducing and detecting CVE-2026-42880 , a critical vulnerability in Argo CD where the ServerSideDiff gRPC handler exposes Kubernetes Secret data to read-only users. Vulnerability Overview...

CVE-2026-90895 MISP Interactive CLI Shell: Authorization Bypass, Credential Exposure, and Terminal Injection

Affected versions of MISP’s interactive CLI shell implement access control independently from the normal web application, causing several authorization inconsistencies. The patch shows that CLI access could differ from the web application in multiple security-sensitive areas: - feed listings did...

CVE-2026-90895

MISP's interactive CLI shell (versions ≤2.5.45) implemented access control independently from the main web application, creating several authorization bypass gaps. Feed listings skipped lookup_visible restrictions for non-host-organisation users, feed detail access bypassed host-organisation/site...

CVE-2026-90895 MISP Interactive CLI Shell: Authorization Bypass, Credential Exposure, and Terminal Injection

Affected versions of MISP’s interactive CLI shell implement access control independently from the normal web application, causing several authorization inconsistencies. The patch shows that CLI access could differ from the web application in multiple security-sensitive areas: - feed listings did...

CVE-2026-36436-Public-Reference-Pack

CVE-2026-36436-Public-Reference-Pack Summary A vulnerability in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code using standard browser developer tools to...

keysweeper

KEYSWEEPER // SIGINT // SAMY.PL // REL TO ALL // APPLIED HACKING KeySweeper KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back over GSM all keystrokes from any Microsoft wireless...

CVE-2026-82783

Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker with physical access to the product may obtain credentials...

CVE-2026-82775

An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication...

CVE-2023-50462

An issue was discovered in the contentconsent aka Content Consent extension through 2.0.1 for TYPO3. It fails to verify whether a specified content element identifier is permitted by the plugin. This enables an unauthenticated user to display various content elements, leading to an insecure direc...

CVE-2026-82783

Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker with physical access to the product may obtain credentials...

EUVD-2026-77236

Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker with physical access to the product may obtain credentials...

CVE-2026-82778

CVE-2026-82778 affects the CONPROSYS PAC Series (a product line by Contec), where an information exposure through directory listing occurs. A remote unauthenticated attacker can access a specific URL to obtain the directory list without authentication. The CVSS 3.1 score is 4.3 (Medium) with low ...

EUVD-2026-77231

An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication...

CVE-2026-82775

An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication...

CVE-2026-82775

CVE-2026-82775 is an exposure-of-information vulnerability in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series (CONTEC). Accessing a specific URL allows a remote unauthenticated attacker to retrieve a directory listing, potentially revealing sensitive file or folder structure. The...

EUVD-2026-77228

An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication...