CVE-2026-88774: Improper Input Validation

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP...

Weird Machine Compositors: Exploiting AI Orchestration at the Expression Layer

Orchestration platforms secure user-provided expressions through enumerate and block sandboxing: AST rewriting, runtime property blocklists, template sandbox environments. We demonstrate that these sandboxes are weird machines whose instruction set is the underlying language specification, and th...

CVE-2026-31816

CVE-2026-31816 - Bypass de autenticación a RCE en Budibase CVE-2026-31816 es una vulnerabilidad crítica de bypass de autenticación y autorización que afecta a Budibase. La vulnerabilidad se encuentra en el middleware de autorización del lado del servidor responsable de proteger los endpoints de l...

PT-2026-99374

Name of the Vulnerable Software and Affected Versions Kyverno versions 1.16.0 through 1.19.0 Description The software registers the globalcontext.Lib Common Expression Language CEL library in its policy environment without restricting it to the policy's namespace. This differs from other librarie...

Exploit for Inefficient Regular Expression Complexity in Kjd Internationalized_Domain_Names_In_Applications

Domain Validation Service — CVE-2024-3651 Demo A Python Flask...

CVE-2026-67413 RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic exchange accepted a client-controlled rjmserlangselector binding expression whose LIKE evaluator expanded percent and underscore wildcards in...

CVE-2026-67413 RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic exchange accepted a client-controlled rjmserlangselector binding expression whose LIKE evaluator expanded percent and underscore wildcards in...

Emat

Emat Emat is an advanced scraping tool designed to collect email accounts from platforms like Gmail, Yahoo, Hotmail, and government email services. However, it's crucial to emphasize that the script should only be used for educational purposes and not for any abusive or unethical activities. To...

CVE-2026-97736

tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression...

CVE-2026-97736

tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression...

CVE-2026-97736

tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression...

EUVD-2026-86515

tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression...

CVE-2026-97736

tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression...

CVE-2026-97736

The tinyauth application, prior to version 5.1.3 , is vulnerable to a rule bypass flaw. An attacker can bypass security rules by appending an allowed route string, which is made possible by an unanchored regular expression . No specific exploit details or remediation steps are provided in the doc...

n8n - Remote Code Execution via Expression Injection

n8n 1.120.4, 1.121.1, 1.122.0 contains a remote code execution caused by insufficient isolation in workflow expression evaluation, letting authenticated attackers execute arbitrary code with n8n process privileges. Exploit requires authentication. id: CVE-2025-68613 info: name: n8n - Remote Code...

OESA-2026-4013 perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: Perl versions from 5.9.4 before 5.41.9...

PT-2026-98351

Name of the Vulnerable Software and Affected Versions tinyauth versions prior to 5.1.3 Description A rule bypass is possible by appending an allowed route string. This issue stems from the use of an unanchored regular expression, which allows the system to match patterns regardless of their...

CVE-2026-97736: Regular Expression without Anchors

tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression...

The vulnerability of the expression processing mechanism in Timelion’s data visualization service Kibana allows a perpetrator to cause a service failure.

The vulnerability of the expression processing mechanism in Timelion’s Kibana visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the pygments syntax highlighting library allows a hacker to trigger a service failure.

The vulnerability of the pygments syntax highlighting library is related to the use of a regular expression c, which has an inefficient computational cost. Exploiting this vulnerability could allow an attacker to cause a service failure...