Mesop AI Sandbox <= 1.2.2 - Remote Code Execution

Mesop = 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server. id:...

CVE-2021-40859

CVE-2021-40859 Auerswald VoIP System Secret Backdoors -PoC Tool usage: CVE-2021-40859.py http://target:port...

cpx_proftpd

cpxproftpd PoC by Daniel Aldana for CVE-2015-3306 exploitation. Bug reported by Vadim Melihow. METHOD 1: usage: python cpxproftp.py ex: python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt then try: http://127.0.0.1/pass.txt METHOD 2: usage: python cpxproftp.py ex: python cpxproftp.py...

CVE-2026-123512

Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string of emailed links, so the full request URI, including the token, is written to Vikunja's HTTP access log and any reverse-proxy logs when a user clicks the link. Attackers with re...

EUVD-2026-119397

Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string of emailed links, so the full request URI, including the token, is written to Vikunja's HTTP access log and any reverse-proxy logs when a user clicks the link. Attackers with re...

PT-2026-139793

Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string of emailed links, so the full request URI, including the token, is written to Vikunja's HTTP access log and any reverse-proxy logs when a user clicks the link. Attackers with re...

CVE-2026-123512: go-vikunja vikunja: Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string…

Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string of emailed links, so the full request URI, including the token, is written to Vikunja's HTTP access log and any reverse-proxy logs when a user clicks the link. Attackers with re...

Oracle Strategic Network Optimization security vulnerability

A security vulnerability exists in Oracle Strategic Network Optimization versions 12.2.3 through 12.2.15. This vulnerability stems from issues related to the Installation of the SNO component, potentially allowing unauthenticated attackers to gain HTTP access and take control of Strategic Network...

Oracle Global Order Promising security vulnerability

A security vulnerability exists in Oracle Global Order Promising versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Web Service component, potentially allowing low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, ...

Oracle WebCenter Content security vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow unauthenticated attackers to gain HTTP access, resulting in unauthorized access to critical data or full access to all...

Oracle Product Hub security vulnerability

A security vulnerability exists in Oracle Product Hub versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain control of Oracle Product Hub via HTTP access, potentially affecting other products as...

Oracle SOA Suite security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle SOA Suite contain a security vulnerability stemming from issues in the Fabric Layer component. This vulnerability may allow unauthenticated attackers to gain HTTP access, thereby enabling unauthorized access to critical data or all accessible data...

Oracle SOA Suite security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle SOA Suite contain a security vulnerability stemming from issues in the Fabric Layer component. Low-privilege attackers can exploit this vulnerability via HTTP access, potentially leading to full compromise of Oracle SOA Suite...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Core component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can create, delete, or modify critical data or all...

Oracle Enterprise Manager for Siebel security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Siebel contain a security vulnerability stemming from issues in the Configuration Management component. This vulnerability may allow attackers with low privileges to gain HTTP access and take control of Oracle Enterprise Manager for Siebel...

Oracle Quality security vulnerability

A security vulnerability exists in Oracle Quality versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to create, delete, or modify critical data via HTTP access, as well as gain unauthorized access to...

Oracle HRMS (Republic of Korea) security vulnerabilities

A security vulnerability exists in Oracle HRMS Republic of Korea versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Korean Payroll component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical data or all accessible data without...

Oracle Solaris security vulnerabilities

A security vulnerability exists in Oracle Solaris 11.4; it stems from a problem in the Kernel component and may allow unauthenticated attackers to gain HTTP access, potentially causing service hangs or frequent crashes...

Oracle Siebel Apps - Financial Services security vulnerabilities

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability stemming from issues in the Financial Accounts component. This vulnerability may allow unauthenticated attackers to gain HTTP access, leading to unauthorized access to critical data or all accessible data, as well as...

Oracle PeopleSoft Enterprise FIN Common Objects Argentina security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 contains a security vulnerability stemming from issues in the eProcurement component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, as we...