56783 matches found
CVE-2026-67279
MikroTik RouterOS PoC Collection This repository contains proof-of-concept PoC scripts for several MikroTik RouterOS security issues researched and documented in 2026. The materials are intended for authorized security research, laboratory validation, and controlled testing only. This project is...
CVE-2026-53519-PoC
CVE-2026-53519 — Nezha Dashboard Path Traversal & JWT Forgery English | 繁體中文 | 简体中文 This repository contains a Proof-of-Concept PoC exploit for a vulnerability in the Nezha Dashboard that allows unauthenticated path traversal , leading to disclosure of sensitive files including jwtsecretkey and...
CVE-2024-21626-demo
CVE-2024-21626-demo Demo for the LT at Container Runtime Meetup 5. This is to raise awareness of the attack risk based on publicly known information, and misuse is strictly prohibited. Slides Container Runtime Meetup 5 - Can You Really Trust That Image? Taking Host Root with CVE-2024-21626 Loggin...
CVE-2025-32433.py
CVE-2025-32433.py This Python PoC simulates SSH message flows, including key exchange, channel open, and command requests, to analyze server behavior. Intended for controlled lab testing, it demonstrates protocol handling, pre-auth message processing, and payload interactions for research and...
EUVD-2026-92135
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...
CVE-2026-105392: Use of Hard-coded Cryptographic Key
A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.py of the component JWT Signing. The manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . Remote...
CVE-2026-97873
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...
CVE-2026-104966: Authorization Bypass Through User-Controlled Key
Plane is an open-source project management tool. Prior to 1.4.0, two endpoint families fail to verify that nested resource identifiers belong to the workspace and project named in the URL. An authenticated user can read or modify estimates from another workspace through PATCH...
PT-2026-106265
Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.30.0 Description In deployments using flash late-interaction scoring, the engine derives worker cache keys for query embeddings from the X-Request-Id header, which is controlled by the caller. A concurrent request that...
CVE-2026-18040
In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF2^8 arithmetic used lookup tables indexed by field elements, making the cache line touched a function of the operand, and its fixed-weight support sampler left its duplicate scan as soon as a...
EUVD-2026-92785
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...
CVE-2026-78861
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...
CVE-2026-78861
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...
CVE-2026-78861
The Mercusys AC12 V2 is vulnerable to a flaw where a local attacker can execute arbitrary code . This vulnerability is caused by the inclusion of a hardcoded 512-bit RSA Private Key within the device. While the CVSS 3.1 score is 7.7 (High) , indicating high impact on confidentiality and integrity...
PT-2026-106221
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...
Apple iOS, iPadOS, and macOS Certificate Validation
Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS contain a certificate validation issue that could allow an attacker with a compromised intermediate certificate authority to issue certificates with arbitrary extended key usages...
PT-2026-104754
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 4.0.0...
CVE-2026-105633: Authorization Bypass Through User-Controlled Key
Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...
PT-2026-106088
Name of the Vulnerable Software and Affected Versions Plane versions prior to 1.4.0 Description Manifests in deployments/aio/community/ and deployments/cli/community/ use fixed, publicly known default values for SECRET KEY and LIVE SERVER SECRET KEY that remain active if not overridden. While the...