CVE-2026-108659

JeecgBoot versions through 3.9.5 are affected by a missing authorization vulnerability in the SysTenantController's listPackByTenantUserId handler. This flaw allows any authenticated user to query tenant product packs by supplying arbitrary tenantId and userId parameters. Consequently, low-privil...

CVE-2026-108656

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw (CWE-862) within the SysTenantController at the GET /sys/tenant/getTenantPackApplyUsers endpoint. This vulnerability allows any authenticated user to access and read tenant administrator applications. By iterating the...

CVE-2026-108626

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw in the SysMessageController's queryById handler. This vulnerability allows low-privileged authenticated users to access arbitrary message push records by supplying specific IDs to the GET /sys/message/sysMessage/query...

EUVD-2026-96425

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0...

EUVD-2026-96402

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the...

CVE-2026-108592

The mini-swe-agent software (versions 1.10.0 through 2.4.6 ) is vulnerable to an information exposure flaw within the BubblewrapEnvironment component. The root cause is that the underlying bwrap tool omits the --clearenv flag, causing sandboxed commands to inherit the host's environment variables...

CVE-2026-98384

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When processing socket destruction requests through the bpfsockdestroy helper, the kernel fails to properly verify if a socket is a full socket before attempting to read its protocol field, causing an out-of-bounds memor...

CVE-2026-108583

The zotero-mcp tool versions 0.10.0 through 0.14.1 is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is that the _fetch_embedded_metadata function fetches URLs without performing destination validation. Attackers can use prompt injection to steer the agent into calling the zo...

CVE-2026-108581

TencentCloud Octop versions through 1.0.2b6 are vulnerable to a missing authorization flaw (CWE-862). Authenticated users with low privileges can access the GET /api/providers and GET /api/voice/providers endpoints, which only validate the JWT without sufficient permission checks. This allows att...

CVE-2026-98377

A flaw was found in the Linux kernel's VLAN Virtual Local Area Network networking component. A local user can exploit this vulnerability by transmitting crafted, undersized network frames that trigger multiple VLAN tag insertions without verifying the presence of a Media Access Control MAC header...

CVE-2026-108547

AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint. Attackers can enumerate sequential shared variable IDs and decrypt all-users variables re-encrypted...

CVE-2026-98350

A flaw was found in the Linux kernel's Broadcom FullMAC brcmfmac wireless driver. During external Wi-Fi authentication, an uninitialized data structure can leak sensitive kernel stack memory directly to the device firmware when processing short network names or key identifiers. A local user or an...

EUVD-2026-96342

AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint. Attackers can enumerate sequential shared variable IDs and decrypt all-users variables re-encrypted...

CVE-2026-98349

A flaw was found in the Linux kernel's libipw wireless module. A remote attacker within Wi-Fi range can exploit this vulnerability by transmitting specially crafted, undersized Wi-Fi beacon or probe response frames. Due to an improper frame length calculation, the driver reads beyond allocated...

CVE-2026-98348

A flaw was found in the Linux kernel's libipw wireless driver. An attacker within Wi-Fi range can exploit this flaw by transmitting a malformed, abnormally short association response frame. Due to an improper packet length calculation, the driver performs an out-of-bounds memory read, which can...

EUVD-2026-96326

Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 Joomla Unauthenticated Information Disclosure Описание Поддерживает высокопараллельное обнаружение Запишите url в urls.txt, поддерживается только формат http://ip:port & https://ip:port Используйте параметр -p для добавления прокси Просто запустите Использование Помо...

Mr.Holmes

🔍 Mr.Holmes Mr.Holmes — это инструмент для сбора информации OSINT. Основная цель — получение информации о доменах, именах пользователей и номерах телефонов с помощью общедоступных источников в интернете, а также использование Google Dorks для целевых исследований. Он также использует прокси для...

CVE-2023-28432-metasploit-scanner

CVE-2023-28432-metasploit-scanner metasploit 기반 MinIO 정보 공개 취약점 스캐너 준비 POC git clone https://github.com/TaroballzChen/CVE-2023-28432-metasploit-scanner cd CVE-2023-28432-metasploit-scanner mkdir -p /.msf4/modules/auxiliary/scanner/http cp minioinformationdisclosure.py...

ImageMagick-lfi-poc

ImageMagick-lfi-poc ImageMagick 임의 파일 읽기 - CVE-2022-44268 htb pilgrimage에서도 사용됨 ImageMagick LFI PoC CVE-2022-44268 MetabaseQ의 연구원들이 CVE-2022-44268을 발견했습니다. 즉, ImageMagick 7.1.0-49는 정보 노출Information Disclosure에 취약합니다. PNG 이미지를 파싱할 때예: 크기 조정, 결과 이미지에 임의의 원격 파일 내용이 포함될 수 있습니다ImageMagick 바이너리에 해당 파일을...