AlmaLinux 9.6 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794221920)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794221920 advisory. - When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an...

PT-2026-141228

Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in Parse NTLM Auth in src/dissectors/ec http.c due to unvalidated NTLM message offsets. Attackers can send a crafted HTTP Authorization header observed by Ettercap to read beyond the buffer, disclosing memory or crashing the...

PT-2026-141150

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.25 Rack versions prior to 3.1.23 Rack versions prior to 3.2.8 Description The Rack::Multipart::Parser.parse boundary function can skip a leading empty or quoted boundary parameter in a multipart Content-Type header a...

Amazon Linux 2 : python-pillow (ALAS-2026-4075)

The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4075 advisory. Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid...

PT-2026-141154

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.25 Rack versions prior to 3.1.23 Rack versions prior to 3.2.8 Description Rack::Static serves a path after Utils.clean path info normalization but evaluates header rules against a path that is only URL-decoded. This...

Rocky Linux 9.6 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794221920)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794221920 advisory. - When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume a...

CVE-2026-119755: arendst Tasmota: Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows…

Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess by crafting a Referer header where the device hostname or IP appears as a substring...

Important: python-pillow

Issue Overview: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage;...

PT-2026-140926

Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess by crafting a Referer header where the device hostname or IP appears as a substring...

PT-2026-140228

Name of the Vulnerable Software and Affected Versions NEC Corporation WebSAM WinShare versions prior to 7.5.1 NEC Corporation WebSAM WinShare version 7.6.0 NEC Corporation WebSAM WinShare versions 7.7.0 through 7.7.2 Description A buffer overflow occurs during the data receiving process. A remote...

CVE-2026-124493

SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that injects header textContent into innerHTML without HTML escaping. Attackers can store entity-encoded HTML in h1-h6 headers that executes JavaScript when editors using document:header mo...

EUVD-2026-119548

SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that injects header textContent into innerHTML without HTML escaping. Attackers can store entity-encoded HTML in h1-h6 headers that executes JavaScript when editors using document:header mo...

CVE-2026-124493

SunEditor versions prior to 3.4.0 are vulnerable to a stored cross-site scripting (XSS) flaw within the DocumentType constructor . The root cause is the injection of header textContent into innerHTML without proper HTML escaping. Attackers can store entity-encoded HTML in h1-h6 headers, which exe...

CVE-2026-124493 SunEditor before 3.4.0 Stored XSS via DocumentType Header textContent

SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that injects header textContent into innerHTML without HTML escaping. Attackers can store entity-encoded HTML in h1-h6 headers that executes JavaScript when editors using document:header mo...

CVE-2026-124493

SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that injects header textContent into innerHTML without HTML escaping. Attackers can store entity-encoded HTML in h1-h6 headers that executes JavaScript when editors using document:header mo...

CVE-2026-120415

undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, the redirect interceptor strips sensitive headers such as Authorization, Cookie, Proxy-Authorization, and Host when a request is redirected to a different origin, but when request headers are supplied...

CVE-2026-41940-PoC-3

CVE-2026-41940 ⚠ This tool is created solely for educational or bug bounty purpose only. Unauthorized use outside of controlled environments is strictly prohibited. Description A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM CVSS 10.0, allowing unauthenticat...

CrushFTP-AS2-Bypass-Research-CVE-2025-54309

CrushFTP AS2 Authentication Bypass Research ⚠️ IMPORTANT: This vulnerability has been patched by CrushFTP as of November 2025. This research is published for educational and defensive purposes only. 📝 NOTE: This research is based on vulnerability patterns similar to CVE-2025-54309. The exact CVE...

POC-CVE-2023-32681

POC for CVE-2023-32681 This is a Python 3 implementation of CVE-2023-32681, affecting clients using the requests version = 2.30.0. As per https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4 whenever redirection 3xx is issued by the server then user-agent should modify the request to remove...

refresh

Refresh This container emulates the vulnerable functionality of CVE-2022-1388 in an F5 Router allowing RCE. CVE-202201388 stems from a complicated relationship between different authentication mechanisms and broxying that stripped Headers allowing improper access to admin endpoints in the webapp...