EUVD-2026-94375

Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject...

CVE-2026-106562 Backstage: Incorrect authorization in search engine permission filtering

Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject...

EUVD-2026-94373

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560

The Backstage open framework for developer portals contains an improper repository path validation vulnerability in the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package. Specifically, a scaffolder backend module fails to properly validate repository paths, allowing an au...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106559

The Backstage framework is vulnerable in the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package prior to version 0.3.25 . The root cause is improper input validation within the Confluence to Markdown scaffolder module. This flaw allows an attacker to influence file write o...

EUVD-2026-94372

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to...

CVE-2026-106559 Backstage: Improper input validation in Confluence to Markdown scaffolder module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to...

CVE-2026-106559 Backstage: Improper input validation in Confluence to Markdown scaffolder module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to...

CVE-2026-106463

A flaw was found in Backstage's plugin-catalog-backend-module-gitlab. When GitLab organization event ingestion is enabled, improper authorization checks during user ingestion can allow unintended identities to be registered in the catalog. A remote attacker may exploit this flaw to bypass catalog...

gophoner

gophoner​​ Проверяйте одновременно, зарегистрирован ли номер телефона в популярных приложениях и на сайтах, без каких-либо предварительных условий. Поставьте звезду и поделитесь этим репозиторием, если он вам полезен ⭐ Содержание Отказ от ответственности Возможности Установка Использование...

BIT-JOOMLA-2026-92225 Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260912 - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The module list layout did not properly escape user supplied values, leading to an XSS vector...

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

OpenSTAManager RCE エクスプロイト CVE-2026-38751 概要 このPythonスクリプトは、CVE-2026-38751として識別されたOpenSTAManagerバージョン2.10のリモートコード実行の脆弱性を悪用します。このエクスプロイトにより、認証されたユーザーは悪意のあるモジュールをアップロードし、ターゲットシステム上で任意のコマンドを実行できます。 脆弱性詳細 CVE ID : CVE-2026-38751 製品 : OpenSTAManager バージョン : 2.10 タイプ : リモートコード実行 RCE 攻撃ベクトル :...

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Автор: Michael Sanji Winaya Prawiradibrata ИИ-соавтор: Varanus — мой друг Фреймворк эксплойта heap buffer overflow, нацеленный на ngxhttprewritemodule NGINX. Один инструмент для разведки и эксплуатации. Ноль внешних зависимостей. Содержимое репозитория Файл...

CVE-2026-105839

A flaw was found in libmikmod. An integer overflow in the Oktalyzer music module loader can result in a heap-based buffer overflow when parsing manipulated track counts. By tricking a user or application into processing a specially crafted audio file, an attacker could achieve arbitrary code...

CVE-2026-105837

A flaw was found in libmikmod. A local attacker can cause arbitrary code execution or a Denial of Service DoS by enticing a user to open a specially crafted DSM audio module. An integer overflow during track count processing in the DSM file loader leads to a heap-based buffer overflow that corrup...

HookTools

HookTools Обзор HookTools — это небольшой инструмент, предназначенный для помощи в анализе чрезвычайно скрытного вредоносного ПО. Его можно внедрить в образец вредоносного ПО, чтобы определить его реакцию на определённые изменения. Возможности HookTools включает ряд переключаемых функций: Доступ ...

rcm-modchips

Архив RCM Bug «Modchip» Этот репозиторий, находящийся в стадии разработки, собирает различные образцы встроенных устройств, которые вызывают уязвимость «Fusée Gelée»/«ShofEL2» CVE-2018-6242. Ничто в этом репозитории не готово к публичному использованию...