OESA-2026-3724 python-gunicorn security update

GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn...

OESA-2026-3721 python-GitPython security update

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fixes: GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options...

OESA-2026-3720 python-ujson security update

UltraJSON Security Fixes: UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation.CVE-2021-45958 UltraJSON is a fast JSON encoder and decoder written in pure C with...

OESA-2026-3708 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: seg6: separate dstcache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a single dstcache per encap route, shared between seg6inputcore and...

OESA-2026-3707 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: seg6: separate dstcache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a single dstcache per encap route, shared between seg6inputcore and...

OESA-2026-3706 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:net: afcan: do not leave a dangling sk pointer in cancreateOn error cancreate frees the allocated sk object, but sockinitdatahas already attached it to the provid...

OESA-2026-3705 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison The local-vs-remote region comparison loop uses '=' instead of '', causing it to read one entry pa...

wp2shell

wp2shell par : ek0ms savi0r Exécution de code à distance non authentifiée pour WordPress Core POC CVE-2026-63030 + CVE-2026-60137 L'exploit wp2shell pour une chaîne de vulnérabilités critiques dans le noyau WordPress. Il enchaîne un bug de confusion de route batch de l'API REST avec une injection...

-CVE-2017-0785-BlueBorne-PoC

-CVE-2017-0785-BlueBorne-PoC CVE-2017-0785 BlueBorne PoC Aperçu général Armis Labs a révélé un nouveau vecteur d'attaque mettant en danger les principaux systèmes d'exploitation mobiles, de bureau et IoT, notamment Android, iOS, Windows et Linux, ainsi que les appareils les utilisant. Ce nouveau...

CVE-2019-1003000_RCE-DETECTION

CVE-2019-1003000RCE-DETECTION Résumé général En enchaînant la vulnérabilité CVE-2018-1000861 avec CVE-2019-1003000, j'ai créé un module pour tester une RCE pré-authentification sur Jenkins CI. Initialement, j'avais essayé de détecter la vulnérabilité avec un nom d'utilisateur, un mot de passe et ...

uboatdemo

uboatdemo Un serveur de démonstration pour CVE-2016-3955 UBOAT Effectue un débordement de tas Linux, lorsque le client USB/IP commence à envoyer des URB de contrôle. Construction Le serveur est un programme Go simple standard. Vous pouvez le construire de la manière habituelle, à condition d'avoi...

CVE-2026-55795

Craft Commerce is an ecommerce platform for Craft CMS. From 4.0.0 until 4.11.2 and 5.6.5, CartController in src/controllers/CartController.php activates its RateLimiter only when the number POST or GET parameter is supplied. An unauthenticated attacker can submit couponCode values to...

CVE-2026-54541

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to 1.6.0, a malicious state-sync peer can crash a syncing node by sending a crafted TrieChunk proof containing two TrieProofNode values with identical keys. TrieProof::verify call...

TP-Link-ArcherC5-RCE

TP-Link Archer C5: аутентифицированное RCE через загрузку вредоносного файла конфигурации CVE-2018-19537 Описание Во всех опубликованных версиях прошивки маршрутизатора TP-Link Archer C5 существует аутентифицированная уязвимость удаленного выполнения кода RCE. Загрузив специально созданный файл...

ai-cyber-risk-assistant

AI-Powered Cyber Risk Assistant Takes TawasolPay's data pack...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check

A flaw was found in golang.org/x/crypto/ssh. The Verify method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially...

CiscoRV320Dump

CiscoRV320Dump Exploits CVE-2019-1653/CVE-2019-1652 pour extraire les configurations des Cisco RV320 et obtenir une RCE Implémentations des exploits CVE-2019-1652 et CVE-2019-1653 divulgués par Red Team Pentesting GmbH. Je n'ai testé que sur un RV320, mais selon l'avis Cisco, le RV325 est égaleme...

October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls

A vulnerability was identified in the Twig sandbox security policy that allowed a chained bypass when cms.safemode is enabled. The Laravel session store was exposed to Twig with unrestricted method access, and raw SQL methods reachable through Eloquent's call forwarding were not blocked across th...

GHSA-XV9M-FM3W-8W5X October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls

A vulnerability was identified in the Twig sandbox security policy that allowed a chained bypass when cms.safemode is enabled. The Laravel session store was exposed to Twig with unrestricted method access, and raw SQL methods reachable through Eloquent's call forwarding were not blocked across th...

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

WordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved. "New plugins are reviewed before they enter the...