Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Cortex(CCx) 26.0.0-IF002 for August 2026

Summary IBM Content Cortex CCx 26.0.0-IF002 addresses CVEs across components including AI Services & tools, FDM and CPE. Vulnerability Details CVEID:CVE-2026-12817 DESCRIPTION: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also...

Exploit for CVE-2026-13001

CVE-2026-13001 — Podlove Podcast Publisher Unauthenticated File...

terminalphone — Updated!

TerminalPhone Encrypted push-to-talk voice communication over Tor hidden services. TerminalPhone is a single, self-contained Bash script that provides anonymous, end-to-end encrypted voice and text communication between two or more parties over the Tor network. It operates as a walkie-talkie: you...

prismor v1.44.0

Prismor Runtime security for Claude Code, Codex, and other AI coding agents. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website • Onboard with Skill !Trae / Tra...

Exploit for CVE-2026-78070

SQL Injection via ORDER BY Shortcode in plgcontentdpcalendar...

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

CVE-2026-76176

SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admindouble due to improper processing of the values in the ID field included in the selectedgrpdupli parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed ...

CVE-2026-76176 Multiple vulnerabilities in Ocsreports for OCS Inventory NG

SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admindouble due to improper processing of the values in the ID field included in the selectedgrpdupli parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed ...

EUVD-2026-70371

SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admindouble due to improper processing of the values in the ID field included in the selectedgrpdupli parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed ...

CVE-2026-76176 Multiple vulnerabilities in Ocsreports for OCS Inventory NG

SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admindouble due to improper processing of the values in the ID field included in the selectedgrpdupli parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed ...

CVE-2026-76176

CVE-2026-76176 is a SQL injection vulnerability in Ocsreports for OCS Inventory NG , located in the endpoint /ocsreports/index.php?function=admin_double. The root cause is improper processing of values in the ID field of the selected_grp_dupli[] parameter. An authenticated user with operator priv...

CVE-2026-76175

Ocsreports for OCS Inventory NG is affected by a SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. An authenticated user with operator privileges can supply input that is incorporated into an SQL query without proper parameterisation or ...

EUVD-2026-70369

SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...

CVE-2026-76175

SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...

CVE-2026-76175 Multiple vulnerabilities in Ocsreports for OCS Inventory NG

SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...

CVE-2026-76175 Multiple vulnerabilities in Ocsreports for OCS Inventory NG

SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...

sql-injection-poc

SQL Injection PoC – gptcdharmapurico.in 🚨 LEGAL DISCLAIME...

ctftool

CTFTOOL Just want to test the SYSTEM exploit? Click here. An Interactive CTF Exploration Tool This is ctftool, an interactive command line tool to experiment with CTF, a little-known protocol used on Windows to implement Text Services. This might be useful for studying Windows internals, debuggin...

secure-by-default-rce-demo

Node.js RCE 완화: DevOps, 최후의 방어선 이 프로젝트는 Next.js 애플리케이션특히 Server Actions의 심각한 원격 코드 실행RCE 취약점과 코드 취약점이 남아 있더라도 인프라 강화 가 어떻게 공격을 효과적으로 무력화하는지 보여줍니다. 표준 "안전하지 않은" 배포와 Distroless 이미지 및 읽기 전용 파일 시스템 을 사용한 강화된 "안전한" 배포를 대조합니다. 🛡️ 개념: "심층 방어" 소프트웨어 취약점은 피할 수 없습니다. 코드가 실패할 때, 인프라는 공격자가 발판을 넓히는 것을 막아야 합니다...

CVE-2026-3852 Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode Parameter

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skypeurl shortcode attribute of the Social Media Follow module in all versions up to, and including, 4.27.6. This is due to a three-part sanitization failure: 1 the skypeurl field is not included in the $urloptions...