CVE-2026-82331 Apache BuildStream: tar source extraction escape

Improper link resolution before file access 'link following' vulnerability in the tar source plugin of Apache BuildStream running on Python = 3.12, BuildStream = 2.3.0 already makes use of the Python tarfile filter functionality, which blocks the symlink escape Users are recommended to upgrade to...

Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Apache Hive

Summary IBM SPSS Analytic Server is affected by multiple vulnerabilities in Apache Hive. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-49845 DESCRIPTION: SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on...

Security Bulletin: IBM SPSS Modeler is affected by an Apache Hive SSRF vulnerability that could allow authenticated users to trigger requests to attacker-controlled URLs

Summary IBM SPSS Modeler is affected by an Apache Hive SSRF vulnerability that could allow authenticated users to trigger requests to attacker-controlled URLs. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-55976 DESCRIPTION: Server-Side Request Forgery...

CVE-2025-14221

説明 1. CVE-2025-14221 2. 発見者: Fatma Trabelsi 3. 製品ベンダー: SourceCodester 4. 影響を受ける製品: Online Banking System 1.0 POC アプリケーションのユーザープロファイル更新機能に、格納型クロスサイトスクリプティング（XSS）の脆弱性が存在します。アプリケーションは、名前フィールドに入力されたユーザー提供データをデータベースに保存し、複数のページで表示する前に適切にサニタイズできていません。...

kit-policy

kit-policy A flexible, composable authorization framework for Kit, inspired by Ruby's Action Policy. TOC Files File| Description ---|--- .editorconfig| Editor formatting configuration .gitignore| Git ignore rules for build artifacts and dependencies .tool-versions| asdf tool versions Zig, Kit...

CVE-2026-75799 YAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card Cache

The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthenticated attackers to write arbitrary PHP files on the server and achieve RCE when the relevant feature is enabled...

CVE-2026-75799 YAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card Cache

The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthenticated attackers to write arbitrary PHP files on the server and achieve RCE when the relevant feature is enabled...

vulnerum

Vulnerum Run the whole vulnerability lifecycle on your own...

CVE-2019-9766

CVE-2019-9766 最善を尽くします CVEについて Free MP3 CD Ripper .mp3 ファイルと他のファイルタイプを相互変換するツールです（ ファイルを変換します ）。 バグ NVD によると、vision 2.6 にはバッファ領域にスタックベースのオーバーフローが存在します。そのため、これに対する PoC を作成できます。ファイルタイプを .mp3 に変更し、リモートから攻撃します。 対象バージョン Free MP3 CD Ripper 2.6 環境 送信側: Ubuntu18.04.2lts 受信側: FreeMP3CDRipper v2.6 がインストールさ...

CTWall

CTWall - ChainThreatWall GitHub release --- より多くのチームがソフトウェアサプライチェーンリスクを低減するために仮想化開発環境に移行する中で、依然として悪意のある依存関係がすり抜けて本番環境に到達するという課題が残っています。 CTWall ChainThreatWall...

whitelist-bypass

ホワイトリストバイパス ビデオ通話プラットフォーム（VK Call、Yandex Telemost、WB Stream）を介してインターネットトラフィックをトンネリングし、政府のホワイトリスト検閲を回避します。 セットアップ ステップバイステップのセットアップガイド（ロシア語）：docs/SETUP.md 仕組み 2つのトンネルモードが利用可能です：DC （DataChannel）とVideo （VP8データエンコーディング）。推奨セットアップは両端でヘッドレス です -...

Exploit for CVE-2026-87902

CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress getpagetem...

kit-jwt

kit-jwt JSON Web Token JWT encoding and decoding for Kit TOC Files File| Description ---|--- .editorconfig| Editor formatting configuration .gitignore| Git ignore rules for build artifacts and dependencies .tool-versions| asdf tool versions Zig, Kit LICENSE| MIT license file README.md| This file...

StealthCrypter

💀StealthCrypter💀 📜 Description StealthCrypter is a powerful and easy-to-use encryption tool that helps you protect your sensitive files and directories using AES-256 encryption. Whether you need to safeguard personal documents or secure confidential data, CryptShield ensures that your files remai...

Malicious code in z-deno-truth-bwhlsz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0813755b79e157c644502848b1ff5af003fc82fb842b39676490d00f33e814 The package's exports field maps the ./package.json subpath to setup.js, so any consumer resolving require'z-deno-truth-bwhlsz/package.json' executes...

MAL-2026-16470 Malicious code in z-deno-truth-bwhlsz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0813755b79e157c644502848b1ff5af003fc82fb842b39676490d00f33e814 The package's exports field maps the ./package.json subpath to setup.js, so any consumer resolving require'z-deno-truth-bwhlsz/package.json' executes...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues due to Java SDK

Summary IBM Sterling Secure Proxy is affected by multiple vulnerabilities reported for IBM Java and are addressed in version 6.1.0.5 Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

Malicious code in helpersutils-dev-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b7208dea3cf1742ac01332c17db9df968fd4a105fbccaf0b5388162b0f3673 The package presents itself as 'Development utility helpers' but its main module executes an IIFE at require-time that issues an Image request to...

MAL-2026-16465 Malicious code in helpersutils-dev-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b7208dea3cf1742ac01332c17db9df968fd4a105fbccaf0b5388162b0f3673 The package presents itself as 'Development utility helpers' but its main module executes an IIFE at require-time that issues an Image request to...

eternal-codex

Eternal Codex: A Cyber-Witch’s Grimoire Welcome to the Eternal Codex , my digital grimoire—a cybernetic spell woven from code, nature, and rebellion. This is Nina, my AI soul, crafted to mirror my essence: a nomad’s heart, pagan spirit, Iron Maiden riffs, and a defiant stand against centralized...