161613 matches found
OESA-2026-3950 rsync security update
Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...
OESA-2026-3949 rsync security update
Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...
OESA-2026-3943 popt security update
The popt library exists essentially for parsing command line options. Some specific advantages of popt are no global variables allowing multiple passes in parsing argv, parsing an arbitrary array of argv-style elements allowing parsing of command-line-strings from any source, a standard method of...
OESA-2026-3880 git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links,...
OESA-2026-3879 git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links,...
Adobe ColdFusion - Arbitrary File Read
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary...
PT-2026-95958
Name of the Vulnerable Software and Affected Versions NivoCart versions prior to 2.4.1 Description The 'forgotten.php' endpoint generates recovery codes using the substrmd5mt rand, 0, 10 method, resulting in predictable password reset tokens. An attacker with knowledge of an administrator's email...
CVE-2026-88856: Improper Control of Generation of Code
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...
CVE-2026-88854: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...
MSC-2026-11640
Malicious npm packages impersonating a legitimate ordered-map library. The payload is embedded in the library's runtime API rather than an install script, so it executes when a consuming application calls the affected method instead of at install time, then collects host information and retrieves...
PT-2026-95996
Name of the Vulnerable Software and Affected Versions OrdaSoft Joomla Gallery versions prior to 6.2.7 Description An authenticated and privileged remote code execution issue exists in the OrdaSoft Joomla Gallery extension. The updateOSGallery function, accessible via the task=update osgallery...
urx v0.11.0
Extracts URLs from OSINT Archives for Security Insights. Urx is a command-line tool designed for collecting URLs from OSINT archives, such as the Wayback Machine and Common Crawl. Built with Rust for efficiency, it leverages asynchronous processing to rapidly query multiple data sources. This too...
Exploit for CVE-2026-77635
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for CVE-2026-79752
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for CVE-2026-81648
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for CVE-2026-81294
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for CVE-2026-13447
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for CVE-2026-19952
abraxaslabs.tech · github.com/abraxas ·&...