161589 matches found
OESA-2026-3879 git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links,...
OESA-2026-3880 git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links,...
Adobe ColdFusion - Arbitrary File Read
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary...
PT-2026-95958
Name of the Vulnerable Software and Affected Versions NivoCart versions prior to 2.4.1 Description The 'forgotten.php' endpoint generates recovery codes using the substrmd5mt rand, 0, 10 method, resulting in predictable password reset tokens. An attacker with knowledge of an administrator's email...
CVE-2026-88856: Improper Control of Generation of Code
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...
CVE-2026-88854: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...
MSC-2026-11640
Malicious npm packages impersonating a legitimate ordered-map library. The payload is embedded in the library's runtime API rather than an install script, so it executes when a consuming application calls the affected method instead of at install time, then collects host information and retrieves...
PT-2026-95996
Name of the Vulnerable Software and Affected Versions OrdaSoft Joomla Gallery versions prior to 6.2.7 Description An authenticated and privileged remote code execution issue exists in the OrdaSoft Joomla Gallery extension. The updateOSGallery function, accessible via the task=update osgallery...
urx v0.11.0
Extracts URLs from OSINT Archives for Security Insights. Urx is a command-line tool designed for collecting URLs from OSINT archives, such as the Wayback Machine and Common Crawl. Built with Rust for efficiency, it leverages asynchronous processing to rapidly query multiple data sources. This too...
Exploit for CVE-2026-77635
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for CVE-2026-79752
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for CVE-2026-81648
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for CVE-2026-81294
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for CVE-2026-13447
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for CVE-2026-19952
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for CVE-2026-75816
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam
CVE-2026-33439 — OpenAM Pre-Auth RCE Pre-authentication Remot...
Exploit for CVE-2026-78159
abraxaslabs.tech · github.com/abraxas ·&...
vigolium v0.4.8
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...