tool-29489

Tool-29489 Overview 🔍: This tool is used to identify URLs with CVE-2023-29489 vulnerability. The tool uses payloads to identify the bug. Help menu of tool-29489: python main.py help URL inputfile outputfile -h or --help : To display help options. -u or --url : To input URL to check. -i or --input...

CVE-2025-51865

CVE-2025-51865 Vulnerability description Ai2 is a Seattle based non-profit AI research institute. Ai2 provide a playground web application to chat with their LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to tamper other...

EUVD-2026-123061

1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that allows authenticated users to read other users' contacts because no organization, owner or data-scope check is applied. Attackers holding ordinary contact or customer read...

CVE-2026-126496 1Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id}

1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that allows authenticated users to read other users' contacts because no organization, owner or data-scope check is applied. Attackers holding ordinary contact or customer read...

CVE-2026-126496 1Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id}

1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that allows authenticated users to read other users' contacts because no organization, owner or data-scope check is applied. Attackers holding ordinary contact or customer read...

PT-2026-145534

taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.23, the POST /api/skill-exec/skill id/call endpoint in taOS executes built-in skills — including the code exec skill which runs arbitrary Python via subprocess.run"python3", "-c", code — without performing any admin role check, skill...

CVE-2026-126935: diced zipline: Zipline before 4.8.0 contains a race condition vulnerability in src/server/routes/raw/[id].ts that allows remote…

Zipline before 4.8.0 contains a race condition vulnerability in src/server/routes/raw/id.ts that allows remote attackers to bypass file maxViews limits through non-atomic view counting. Attackers holding a file link can send parallel requests that read the same pre-increment count, viewing...

PT-2026-145393

OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows authenticated users to set an incident's reporter to another user by supplying a client-controlled reporter field. Attackers can send crafted POST /api/v1/incidents or PATCH /api/v1/incidents/id/status request...

CVE-2026-126766: OpsTree Solutions REMS: OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows authenticated users to set an…

OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows authenticated users to set an incident's reporter to another user by supplying a client-controlled reporter field. Attackers can send crafted POST /api/v1/incidents or PATCH /api/v1/incidents/id/status request...

PT-2026-145399

OpsTree REMS through 1.0.0 contains an improper attribution vulnerability that allows authenticated users to post comments as the incident creator via POST /api/v1/incidents/incident id/comment. Lower-privileged attackers can comment on incidents owned by users such as a Super User to impersonate...

CVE-2026-126932: diced zipline: Zipline 4.6.2 before 4.8.0 contains a policy bypass vulnerability that allows authenticated users to evade…

Zipline 4.6.2 before 4.8.0 contains a policy bypass vulnerability that allows authenticated users to evade administrator-disabled MIME types by editing file metadata. Attackers can upload a permitted file, then set a disabled type such as text/html through PATCH /api/user/files/:id so /raw/:id...

PT-2026-145628

Zipline 4.6.2 before 4.8.0 contains a policy bypass vulnerability that allows authenticated users to evade administrator-disabled MIME types by editing file metadata. Attackers can upload a permitted file, then set a disabled type such as text/html through PATCH /api/user/files/:id so /raw/:id...

PT-2026-145631

Zipline before 4.8.0 contains a race condition vulnerability in src/server/routes/raw/id.ts that allows remote attackers to bypass file maxViews limits through non-atomic view counting. Attackers holding a file link can send parallel requests that read the same pre-increment count, viewing...

CVE-2026-76080: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.224.0, the public Trust Center GraphQL API exposes Query.nodeid: with @authenticationrequired: OPTIONAL — an unauthenticated internet visitor to any published trust...

PT-2026-145251

A flaw was found in BusyBox. An integer overflow occurs in the volume id component when calculating buffer boundaries while probing filesystem metadata. An attacker can exploit this vulnerability by providing a specially crafted filesystem image on an attached storage device. When probed by...

PT-2026-145476

ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api/projects/id/ resolve the caller's project role but never enforce it, so a user who was granted only the read-only viewer role on a project can perform write operations on that project. T...

CVE-2026-124687: Progress Software Kendo UI for jQuery: In Progress® Kendo® UI for jQuery versions from 2022.2.621 prior to 2026.4.1111 the DropDownButton and SplitButton…

In Progress® Kendo® UI for jQuery versions from 2022.2.621 prior to 2026.4.1111 the DropDownButton and SplitButton allow markup injection through the id and target attributes. An attacker who can influence these item values can break out of the attributes and inject markup, including event...

CVE-2026-65965: 3xpyth0n ideon: ideon is a self-hosted visual workspace

ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api/projects/id/ resolve the caller's project role but never enforce it, so a user who was granted only the read-only viewer role on a project can perform write operations on that project. T...

PT-2026-145264

In Progress® Kendo® UI for jQuery versions from 2022.2.621 prior to 2026.4.1111 the DropDownButton and SplitButton allow markup injection through the id and target attributes. An attacker who can influence these item values can break out of the attributes and inject markup, including event...

PT-2026-145408

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.224.0, the public Trust Center GraphQL API exposes Query.nodeid: with @authenticationrequired: OPTIONAL — an unauthenticated internet visitor to any published trust...