Linux Distros Unpatched Vulnerability : CVE-2026-104056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding. This allows a...

PT-2026-106188

Name of the Vulnerable Software and Affected Versions Ghost versions 1.20.0 through 6.63.0 Description An issue in the way theme translation files are loaded allows an authenticated Administrator to read JSON files located outside of the active theme directory, which could lead to the exposure of...

CVE-2024-41453_CVE-2024-41454

CVE-2024-41453 CVE-2024-41454 ثغرات ProcessMaker للتعليم فقط: @ryancooley @velkymx @nolanpro @caleeli قم بتثبيت نسخة ProcessMaker 4 Core Docker من هذا المستودع: https://github.com/ProcessMaker/pm4core-docker هذا هو أحدث إصدار من pm docker PMVERSION=4.1.21، الصورة أدناه هي ملف .env. ثغرة XSS المخز...

CVE-2023-31719

CVE-2023-31719 من الممكن حقن كود SQL في معامل JSON "username" من نقطة النهاية /api/signin عبر طلب HTTP POST "username":"test' OR 2891=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2-- ZJMj","password":"test" اسم المنتج المتأثر: FUXA الإصدار المتأثر: = 1.1.12 المشكلة: حقن SQL الوصف: من...

WP2Shell-Scanner

Scanner WP2Shell Un outil en ligne de commande qui vérifie si un site WordPress est exposé à WP2Shell CVE-2026-63030 et CVE-2026-60137. Il lit la version de WordPress et la surface de l'API REST via des requêtes en lecture seule et rend un verdict. Il n'exploite rien. !WARNING Réservé aux tests...

wcfproxy

Build You can either compile the tool once and then use the resulting binary or you can run it "like a script" the Go toolchain will compile it on the fly. For development, the latter option is convenient. For productive use, it is recommended to compile it once from the cli directory and use the...

Security Bulletin: Vulnerability reported in jackson-core-2.18.6.jar for APIM 11.1 is now addressed

Summary Vulnerability reported in jackson-core-2.18.6.jar for APIM 11.1 is now addressed Vulnerability Details CVEID:CVE-2026-68494 DESCRIPTION: The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is...

CVE-2026-73633

CVE-2026-73633 Apache Struts S2-072 — PoC + environnement Principe : Le remplissage JSON du plugin JSON body activé côté serveur « remplissage JSON » est une fonctionnalité essentielle fournie par le plugin JSON de Struts 2, que l'on peut simplement comprendre comme un mécanisme automatique de...

CVE-2026-78903-SWIFT-Kick-to-the-Creds

CVE-2026-78903 — SWIFT Kick to the Creds Confusion d'algorithme JWT de la passerelle API SWIFT Champ| Valeur ---|--- Sévérité| 9.1 Critique Vecteur| Réseau Versions concernées| 3.2.0 – 3.2.4 Découvert par| 𝕍𝕠𝕤𝕤🥷 Description Une erreur de configuration critique dans la passerelle API SWIFT permet ...

crack-0.1.8-fixed

= crack تحليل JSON وXML بسيط حقًا، منقول من Merb وRails. محلل XML منقول من Merb، ومحلل JSON منقول من Rails. لا أدّعي أي فضل؛ لقد قمت فقط بتغليفهما ليستمتع بهما الجميع ويستخدمهما بسهولة. == ملاحظة حول الإصدارات تُوسم الإصدارات tags على github كما تُطرح كجيمات gems على github وrubyforge. يتم الدفع...

cover

Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install · Quick start · Policies · Monitoring · Pi / OMP · Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...

CVE-2026-105134

A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack...

EUVD-2026-92078

A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack...

CVE-2026-105134 Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection

A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack...

cfgrip

cfgrip PE/ELF x86/x64 CFG extractor. Takes a binary in, disassembles it, resolves every jump and call GOT, jump tables, register tracing, and exports the full control flow graph as structured JSON. why You need to know exactly where every branch goes. Not for reading — for patching. Feed the JSON...

CVE-2023-45966

CVE-2023-45966 SSRF أعمى في umputun/remark42 إلى SSRF أعمى بسبب عدم وجود حقل title وعدم كفاية تصفية حقل url في طلب إنشاء التعليق. معلومات إضافية الإصلاح في الالتزام: efceed6 نوع الثغرة الأخرى CWE-918: تزوير الطلب من جانب الخادم بائع المنتج https://github.com/umputun قاعدة كود المنتج المتأثر الإصد...

couchdb-exploit

🚀 CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution 📖 Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| 🔴...

web3-decoder

Web3 Decoder Web3 Decoder est une extension Burp Suite conçue pour analyser les opérations blockchain et les interactions avec les contrats intelligents. Elle traite les appels JSON-RPC vers Ethereum et les réseaux compatibles notamment Polygon, Arbitrum, BSC, et autres Clés API des explorateurs ...

EUVD-2026-92047

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...

CVE-2026-105125

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...