EUVD-2026-92130

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-102262: Exposure of Resource to Wrong Sphere

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file's folder when a victim clicks on the file, resulting in code...

CVE-2026-104894: Authorization Bypass Through User-Controlled Key

Plane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL path without validating that they belong to the caller's workspace. An authenticated user can link issues from any workspace to modules in their own workspace. This issue is fixed ...

PT-2026-106228

Name of the Vulnerable Software and Affected Versions Newell Brands DYMO ID versions prior to 1.6.0 Description The software resolves its plugin Modules directory relative to the process working directory. This allows an attacker to store a job file alongside malicious modules or DLLs. When a...

PT-2026-106020

Plane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL path without validating that they belong to the caller's workspace. An authenticated user can link issues from any workspace to modules in their own workspace. This issue is fixed ...

cve-2021-4034

cve-2021-4034 mkdir -p 'GCONVPATH=.'; touch 'GCONVPATH=./pwnkit'; chmod a+x 'GCONVPATH=./pwnkit' mkdir -p pwnkit; echo 'module UTF-8// PWNKIT// pwnkit 2' pwnkit/gconv-modules echo...

PT-2026-104650

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE FS ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe fs api.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits...

Pentesting

⚡ Pentesting Toolkit v3.0 — AMAN EDITION Pentesting Toolkit e...

PT-2026-104555

Name of the Vulnerable Software and Affected Versions Dell Container Storage Modules versions prior to 1.18.0 Description The csm-docs component contains hard-coded credentials. An unauthenticated remote attacker could exploit this issue to cause information disclosure. Recommendations Update Del...

PT-2026-104558

Dell Container Storage Modules, versions prior to 1.18.0 contains an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

PT-2026-104556

Name of the Vulnerable Software and Affected Versions Dell Container Storage Modules versions prior to 1.18.0 Description An issue exists in the CSM Authorization component due to the use of hard-coded credentials. This allows an unauthenticated attacker with remote access to potentially exploit...

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules CSM that could be exploited by bad actors to take over susceptible systems. The vulnerabilities are listed below - CVE-2026-63688 CVSS score: 10.0 - A missing authentication for critic...

PT-2026-104156

Name of the Vulnerable Software and Affected Versions Dell Container Storage Modules CSM versions prior to 1.18.0 Description The csm-authorization-storage gRPC server lacks authentication for a critical function. This allows an unauthenticated remote attacker to gain unauthorized access to stora...

PT-2026-104157

Name of the Vulnerable Software and Affected Versions Dell Container Storage Modules versions prior to 1.18.0 Description An issue exists where authentication is missing for a critical function. A remote, unauthenticated attacker could exploit this flaw to achieve elevation of privileges...

PT-2026-104448

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

Gitea Locale DoS

The vulnerability of the Locale function in the modules/web/middleware/locale.go file of the Git repository management system Gitea is related to the improper implementation of flow control. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Gitea Open Disclosure Information Disclosure

The vulnerability of the Open function in the modules/uri/uri.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Gitea Clone SSRF

The vulnerability of the Clone function in the modules/git/repo.go file of the Git repository management tool Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a remote attacker to perform an SSRF attack...

Gitea init-function internalAPITransport Internal

The vulnerability of the init-function in the internalAPITransport function in the modules/private/internal.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the confidentialit...

Custom-Metasploit-Modules

Custom Metasploit Modules This repository contains custom Metasploit modules created for educational and recreational purposes. Table of Contents Modules Loading Modules in Metasploit Usage Contribution Disclaimer Modules Below is a list of custom Metasploit modules available in this repository:...