CVE-2026-23744-poc

CVE-2026-23744 — mcpJam リモートコード実行 RCE エクスプロイト 本ツールは、mcpJam v1.4.2 に影響する任意のコマンド実行の脆弱性 CVE-2026-23744 に対する概念実証エクスプロイト（Python 3 製）です。このユーティリティは、送信前にコマンドを透過的に Base64 エンコードすることでペイロードの配信を自動化し、制限的な入力検証や文字フィルタリング機構を回避するのに役立ちます。ペイロードはターゲットシステム上で /bin/bash ラッパーを通じてデコードされ実行されます。 特徴 自動 Base64 ペイロードエンコーディング...

CVE-2025-12758

CVE-2025-12758：Validator.js isLength 函数 Unicode 变体选择符绕过漏洞 CVE ID： CVE-2025-12758 CVSS 评分： 8.7（高危） 严重性： 高危 CWE： CWE-792（对一个或多个特殊元素实例的过滤不完整） 发布日期： 2025年11月26日 披露日期： 2025年10月19日 漏洞概述 此漏洞影响 validator npm 包版本 13.15.22。isLength 函数在计算字符串长度时未考虑 Unicode 变体选择符（\uFE0F、\uFE0E），从而导致输入验证不当。 影响 使用 isLength...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 原始链接：https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye 通过客户端验证绕过实现 RCE 摘要 在对运行在 Docker 中的 MotionEye 实例进行安全测试时，发现 Web UI 中的客户端验证可以被绕过。这允许提交任意输入，包括可能触发宿主容器执行命令的载荷。该问题如果被利用，存在远程代码执行（RCE）的风险。 受影响版本 ：包括...

CVE-2026-27626-POC

CVE-2026-27626：OliveTin 密码参数命令注入 OliveTin 允许管理员定义“操作”：带有参数化参数的 shell 命令，用户可以通过 Web UI 或 API 触发。在将用户提供的值模板化到 shell 命令之前，OliveTin 本应通过 checkShellArgumentSafety 对其进行检查。该函数会检查四种参数类型：string、int、bool、choice。它完全跳过了 password 类型，并直接返回 true（表示“安全”），而不对值进行任何检查。 因此，如果某个操作包含 password 类型的参数，并且该参数被替换到 shell...

CVE-2026-53541 OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...

CVE-2026-17079 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...

CVE-2026-67287 Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0

Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input...

CVE-2026-59695 Unbounded max_fee_per_gas in mpp Tempo fee-payer enables single-request wallet drain

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet in a single request by naming an arbitrarily high gas price. When the mpp Elixir library is configured as fee payer feepayer: true,...

CVE-2026-11851

Improper Neutralization of Special Elements used in an SQL Command "SQL Injection" in the web management interface of certain ASUS router models allows a remote authenticated user to disclose confidential information via a crafted request that bypasses existing input validation Refer to the ' ...

EUVD-2026-44584

Improper Neutralization of Special Elements used in an SQL Command "SQL Injection" in the web management interface of certain ASUS router models allows a remote authenticated user to disclose confidential information via a crafted request that bypasses existing input validation Refer to the ' ...

PYSEC-2026-397 llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution

A vulnerability was identified in the executils class of the llamaindex package, specifically within the safeeval function, allowing for prompt injection leading to arbitrary code execution. This issue arises due to insufficient validation of input, which can be exploited to bypass method...

CVE-2026-54911

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps or ujson.dump or ujson.encode have a rejectbytes=False option. When set, they may accept malformed or truncated UTF-8 byte sequences, silently rewriting them into different...

DEBIAN-CVE-2026-54911

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps or ujson.dump or ujson.encode have a rejectbytes=False option. When set, they may accept malformed or truncated UTF-8 byte sequences, silently rewriting them into different...

CVE-2026-54911

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps or ujson.dump or ujson.encode have a rejectbytes=False option. When set, they may accept malformed or truncated UTF-8 byte sequences, silently rewriting them into different...

CVE-2026-54911 UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps or ujson.dump or ujson.encode have a rejectbytes=False option. When set, they may accept malformed or truncated UTF-8 byte sequences, silently rewriting them into different...

CVE-2026-54911

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps or ujson.dump or ujson.encode have a rejectbytes=False option. When set, they may accept malformed or truncated UTF-8 byte sequences, silently rewriting them into different...

CVE-2026-54911

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps or ujson.dump or ujson.encode have a rejectbytes=False option. When set, they may accept malformed or truncated UTF-8 byte sequences, silently rewriting them into different...

CVE-2026-54911

CVE-2026-54911 (UltraJSON) : The vulnerability affects UltraJSON (C core with Python bindings) where ujson.dumps()/dump()/encode() with reject_bytes=False may accept malformed or truncated UTF-8, silently rewriting to other Unicode characters instead of rejecting. This enables input validation by...

GHSA-6RFW-MQ36-JM8H Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

Summary The AWS Bedrock AgentCore Python SDK bedrock-agentcore is an open-source SDK that enables developers to build, deploy, and manage agents on AWS Bedrock AgentCore. An issue exists in the installpackages method of the Code Interpreter client where crafted package name arguments can bypass...

CVE-2026-11460

A flaw has been found in Boost Serialization up to 1.91. The impacted element is an unknown function. This manipulation causes improper validation of specified type of input. It is possible to initiate the attack remotely. The exploit has been published and may be used. The maintainer was notifie...