Linux Distros Unpatched Vulnerability : CVE-2026-18036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately...

Exploit for CVE-2026-15989

CVE-2026-15989 — Super Forms ≤ 6.3.316 — Unauthenticated Privi...

Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain

Summary: 5 findings — unauthenticated full-API exposure F1, lead Critical, read-side authorization gap that persists even with APIAUTHKEY set F2, unauthenticated file write of .py/.sh/.yaml to a server-returned path F3, default-permissive CORS that combines with a loopback-only check to grant any...

GHSA-V2F8-6655-7GRJ Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain

Summary: 5 findings — unauthenticated full-API exposure F1, lead Critical, read-side authorization gap that persists even with APIAUTHKEY set F2, unauthenticated file write of .py/.sh/.yaml to a server-returned path F3, default-permissive CORS that combines with a loopback-only check to grant any...

Vibe-Trading file-read tools expose arbitrary server-readable files

Summary: 2 findings — safeuserpath accepts any path under Path.home or Path.cwd, which inside the shipped root container resolves to /root and /app so all of root's home, including /root/.ssh/idrsa, /root/.aws/credentials, /root/.kube/config, and /app/agent/.env, passes the check F9. readdocument...

GHSA-5RMQ-CHC7-M22F Vibe-Trading file-read tools expose arbitrary server-readable files

Summary: 2 findings — safeuserpath accepts any path under Path.home or Path.cwd, which inside the shipped root container resolves to /root and /app so all of root's home, including /root/.ssh/idrsa, /root/.aws/credentials, /root/.kube/config, and /app/agent/.env, passes the check F9. readdocument...

Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF

Summary: 5 findings — BashTool shell-injection sink F6, the canonical RCE primitive, BackgroundRunTool async shell-injection sink F7, backtest execmodule runs top-level statements before the SignalEngine class check F8 — independent RCE path that does not match BashTool signatures, readurl outbou...

GHSA-JQMF-MX4F-HFR6 Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF

Summary: 5 findings — BashTool shell-injection sink F6, the canonical RCE primitive, BackgroundRunTool async shell-injection sink F7, backtest execmodule runs top-level statements before the SignalEngine class check F8 — independent RCE path that does not match BashTool signatures, readurl outbou...

Trigger.dev: V1 coordinator default-secret unauth Socket.IO

TL;DR The /coordinator Socket.IO namespace mounts on every webapp boot and authenticates with a default secret "coordinator-secret" baked into source. The override variable isn't documented in the self-host docs, .env.example, or helm values, so any operator who didn't read source ships with the...

GHSA-GG6R-GP4C-89HP Trigger.dev: V1 coordinator default-secret unauth Socket.IO

TL;DR The /coordinator Socket.IO namespace mounts on every webapp boot and authenticates with a default secret "coordinator-secret" baked into source. The override variable isn't documented in the self-host docs, .env.example, or helm values, so any operator who didn't read source ships with the...

cowrie v3.1.0

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie What is Cowrie Cowrie is a medium to high interaction SSH and Telnet honeypot designed to log brute...

area51

Every callback, captured. The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a dashboard you control, and it gets whatever response you choose in return. Getting started · Playbooks · CLI · Architecture ·...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 Bypass de Autenticación RCE en iControl REST de F5 BIG-IP. POST /mgmt/tm/util/bash HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Connection: close, X-F5-Auth-Token, X-Forwarded-For, Local-Ip-From-Httpd, X-F5-New-Authtok-Reqd, X-Forwarded-Server,...

CVE-2026-104055

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: opensearch-fips, drain-cleaner, traccar, kayenta, keycloak-config-cli, jmeter, flink-kubernetes-operator, automq-fips, wso2is, scala, thingsboard, solr-fips, ontop, traccar-fips, apache-pulsar, camunda, conductor, knative-kafka-broker-fips, neo4j,...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: cilium, kubescape-operator-fips, kubescape, kubescape-server-fips, hubble-ui, kubescape-operator, hubble, kubescape-server, hubble-ui-backend-fips, hubble-fips...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: opensearch-fips, drain-cleaner, traccar, kayenta, keycloak-config-cli, jmeter, flink-kubernetes-operator, automq-fips, wso2is, scala, thingsboard, solr-fips, ontop, traccar-fips, apache-pulsar, camunda, conductor, knative-kafka-broker-fips, neo4j,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: opensearch-fips, drain-cleaner, traccar, kayenta, keycloak-config-cli, jmeter, flink-kubernetes-operator, automq-fips, wso2is, scala, thingsboard, solr-fips, ontop, traccar-fips, apache-pulsar, camunda, conductor, knative-kafka-broker-fips, neo4j,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: opensearch-fips, drain-cleaner, traccar, kayenta, keycloak-config-cli, jmeter, flink-kubernetes-operator, automq-fips, wso2is, scala, thingsboard, solr-fips, ontop, traccar-fips, apache-pulsar, camunda, conductor, knative-kafka-broker-fips, neo4j,...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: k8sgpt, xeol, cluster-api-helm-controller-fips, helm-set-status, redpanda-operator, maru, helm-push, xeol-fips, cloudbeat-fips, kyverno-fips, ocm-kubernetes-controller, flux-helm-controller, tigera-operator, kube-arangodb-fips, kyverno-notation-aws-fips,...