211685 matches found
ps4host
PS4Host A zero-dependency PS4 WebKit exploit host with a...
PT-2026-83546
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash sql allows a user who supplies a search term to contains/2, string starts with/2, or string ends with/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlle...
PT-2026-83569
Name of the Vulnerable Software and Affected Versions WWBN AVideo affected versions not specified Description An unauthenticated credential submission issue exists in the 'plugin/Live/api/preauthorize.json.php' endpoint. The system accepts credentials via the GET method without implementing rate...
PT-2026-83563
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the tag FORBID TAGS: 'script' in apps/readest-app/src/services/transformers/sanitizer.ts. DOMPurify does not parse the conten...
PT-2026-83637
Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A weakness in the SMF component allows a remote attacker to cause a reachable assertion by manipulating the preemptCap argument within the smf nudm sdm handle get function located in the...
PT-2026-83559
NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server's OpenAI API key. The x-base-url header is validated using substring matching instead of hostname parsing, allowing any URL containing...
PT-2026-83518
Name of the Vulnerable Software and Affected Versions ash sqlite versions 0.1.2-rc.0 through 0.2.17 Description Improper neutralization of special elements in data query logic allows an attacker to traverse into nested JSON data that the application did not intend to expose, potentially disclosin...
PT-2026-83583
Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.12 Description The software fails to enforce login-only module restrictions within the RSS feed endpoints for the forum and announcements modules. This allows unauthenticated attackers to retrieve forum topics and...
PT-2026-83553
Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API endpoint, allowing authenticated users to retrieve group memberships of other users. Attackers can call GET /users/id/groups with arbitrary user identifiers to access group name...
Exploit for Code Injection in Langflow
CVE-2026-9198 — IBM Langflow OSS Unauthenticated RCE Proof-of...
Malicious code in grafeno-billing (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72306b800994fea3aa6c6d12e137657ffe70ec9ac6c44abfe3ceaa547ef8e5c6 [email protected] is a stub package whose only substantive code is a preinstall lifecycle hook. On npm install, preinstall.js enumerates...
MAL-2026-15571 Malicious code in grafeno-billing (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72306b800994fea3aa6c6d12e137657ffe70ec9ac6c44abfe3ceaa547ef8e5c6 [email protected] is a stub package whose only substantive code is a preinstall lifecycle hook. On npm install, preinstall.js enumerates...
Malicious code in grafeno-payments (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af58da84956e51749cbb96923f12264cfdee76456b5010b526599b7da2c0caa On npm install, package.json's preinstall hook node preinstall.js || true auto-runs a script that 1 enumerates process.env for keys matching...
MAL-2026-15572 Malicious code in grafeno-payments (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af58da84956e51749cbb96923f12264cfdee76456b5010b526599b7da2c0caa On npm install, package.json's preinstall hook node preinstall.js || true auto-runs a script that 1 enumerates process.env for keys matching...
Incorrect Authorization
Overview org.pac4j:pac4j-core is a pac4j is an easy and powerful security engine for Java to authenticate users, get their profiles and manage authorizations in order to secure web applications and web services. Affected versions of this package are vulnerable to Incorrect Authorization in the...
Open Redirect
Overview org.pac4j:pac4j-core is a pac4j is an easy and powerful security engine for Java to authenticate users, get their profiles and manage authorizations in order to secure web applications and web services. Affected versions of this package are vulnerable to Open Redirect in the perform...
vajra
██╗ ██╗ █████╗ ██╗██████╗ █████╗ ██║ ██║██...