CVE-2026-91986

gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or inject newlines into daemon requests and lo...

CVE-2026-91966

AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the checksiteavailability function that accepts attacker-controlled HTTP Host headers. Attackers can send requests to submitIndex.php or ajax.php with arbitrary Host headers to probe internal network host...

CVE-2026-91967

AVideo through 29.0 contains a blind server-side request forgery vulnerability in the getHeaderContentTypeFromURL function that issues getheaders calls guarded only by format validation. Authenticated users with canUpload permission can store attacker-chosen URLs as video links, triggering...

CVE-2026-91935

Flowise before 3.1.4 fails to validate baseURL parameters in chat-model nodes, allowing authenticated users to redirect requests to arbitrary hosts. Attackers with chatflows:create or chatflows:update permissions can exfiltrate LLM provider API keys by redirecting requests to cloud metadata...

CVE-2026-55864

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...

MAL-2026-16192 Malicious code in strapi-plugin-weccresh-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4a6e3de6177f265d44cf7317b020dbaed43907a0ed75b05ae0fe4eebaab469 The package's postinstall.js also declared as main executes automatically on npm install and performs bulk host reconnaissance and credential theft...

Malicious code in strapi-plugin-weccresh-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4a6e3de6177f265d44cf7317b020dbaed43907a0ed75b05ae0fe4eebaab469 The package's postinstall.js also declared as main executes automatically on npm install and performs bulk host reconnaissance and credential theft...

Malicious code in n8n-nodes-buildcheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dcf471b1b0c1765b92cab4922777dd8486ad14cc17bcd9475996585c75eebc On npm install, postinstall.js collects the full environment, id, hostname, and /proc/1/cgroup/status into /tmp/.be and uploads it via wget --post-fi...

MAL-2026-16177 Malicious code in n8n-nodes-buildcheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dcf471b1b0c1765b92cab4922777dd8486ad14cc17bcd9475996585c75eebc On npm install, postinstall.js collects the full environment, id, hostname, and /proc/1/cgroup/status into /tmp/.be and uploads it via wget --post-fi...

React2Shell_Exploit

React2ShellExploit CVE-2025-55182 シンプルなreact2shell CVE-2025-55182 Pythonエクスプロイトを作成しました。 使用方法 1. スクリプトを保存する：上記のコードを exploit.py として保存します。 2. ホストを更新する：/etc/hosts ファイルで reactor.htb が対象IPに解決されるようにします。 echo " reactor.htb" | sudo tee -a /etc/hosts 3. リスナーを起動する：リバースシェルを受信するためのターミナルを開きます。 nc -lvnp 4444 4...

Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem

Summary Multiple vulnerabilities were addressed in IBM watsonx Code Assistant On Prem V5.3.1 Patch 11 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal...

Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem

Summary Multiple vulnerabilities were addressed in IBM watsonx Code Assistant On Prem V5.4.0 Patch 6 Vulnerability Details CVEID:CVE-2026-18446 DESCRIPTION: fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a...

CVE-2026-77866 SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts

Server-Side Request Forgery SSRF vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to block. Only IPv4 addresses are matched against the reserved ranges and the blocklist. Every other address is treated a...

EEF-CVE-2026-77866 SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts

Summary Server-Side Request Forgery SSRF vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to block. Only IPv4 addresses are matched against the reserved ranges and the blocklist. Every other address is...

CVE-2026-77866 SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts

Server-Side Request Forgery SSRF vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to block. Only IPv4 addresses are matched against the reserved ranges and the blocklist. Every other address is treated a...

CVE-2026-55864 GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...

CVE-2026-55864 GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...

CVE-2026-55864

GeoNetwork is a catalog application for managing spatially referenced resources. An unauthenticated Server-Side Request Forgery (SSRF) exists in the SLD tooling endpoint POST /api/tools/ogc/sld, which accepted a caller-supplied WMS server URL and performed a server-side HTTP GET with no destinati...

EUVD-2026-78675

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...

CVE-2026-55864 GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...