Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-27459 DESCRIPTION: pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-42960 DESCRIPTION: NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-48713 DESCRIPTION: Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings when used to persist missing translation...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-81551 DESCRIPTION: DataStage on Cloud Pak for Data could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage...

BrowserBox v18.8.0

BrowserBox by DOSAYGO Secure, modern Remote Browser Isolation RBI with a clientless experience 🖥️ NEW in v18.10.0 — the BrowserBox desktop app BETA BrowserBox now ships with a desktop app for running your BrowserBox without the command line. Start and stop sessions, pick how people reach it...

mypocs

Statement This repo was incomplete when published. In regar...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Nodejs modules js-yaml, thrift and hono

Summary IBM App Connect Enterprise Runtime is vulnerable to multiple vulnerabilities due to Nodejs modules js-yaml, thrift and hono. Vulnerability Details CVEID:CVE-2026-59868 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yam...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to Apache Neethi (CVE-2026-66142,CVE-2026-66143 & CVE-2026-66144)

Summary IBM App Connect Enterprise runtime is vulnerable to a denial of service due to Apache Neethi. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which ma...

Security Bulletin: IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service (CVE-2026-75624)

Summary IBM App Connect Enterprise runtime is vulnerable to privilege escalation and Denial of Service. Vulnerability Details CVEID:CVE-2026-75624 DESCRIPTION: IBM App Connect Enterprise could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization...

Security Bulletin: IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs

Summary IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs Vulnerability Details CVEID:CVE-2026-17416 DESCRIPTION: IBM App Connect Enterprise could allow a local attacker to execute arbitrary code due to insecure deserialization. CWE:CWE-502:...

OSWAP-top10-handson-practical-writeups-report

Cybersecurity Lab Write-Ups Hands-on write-ups from a local,...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules

Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise runtime are vulnerable to multiple vulnerabilities due to multiple Node.js modules fast-uri, postcss, axios, jsonata and body-parser...

Security Bulletin: Multiple vulnerabilities affect IBM Db2 Warehouse container images.

Summary IBM has released the below fix for IBM Db2® on Db2 Warehouse container images in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-35701 DESCRIPTION: Improper...

Veto v2.3

Veto An open source VirusTotal client for Android Free and open source. Bring your own VirusTotal API key to scan files, links, and installed applications against over 70 engines, built with a Material 3 interface. No accounts, no tracking, no ads. What is Veto? Veto is an Android client for...

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against applications in a specific non-default configuration, and Progress patched the chain in July. There are no confirmed reports of exploitation i...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

wp2shell-poc

wp2shell-poc Independent proof-of-concept for the unauthentic...

xalgorix v4.6.72

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

Security Bulletin: IBM ApplinX is vulnerable to multiple issues like double decoding, interpretation conflict and more due to the use of fast-uri (CVE-2026-75899, CVE-2026-75931, CVE-2026-75975, CVE-2026-76172)

Summary IBM ApplinX is vulnerable to multiple issues like double decoding, interpretation conflict and more due to the use of fast-uri CVE-2026-75899, CVE-2026-75931, CVE-2026-75975, CVE-2026-76172. The fast-uri version has been updated within IBM ApplinX in order to address the mentioned...

Security Bulletin: IBM ApplinX is vulnerable to being directed to unintended host due to the use of fast-uri (CVE-2026-18446)

Summary IBM ApplinX is vulnerable to being directed to unintended host due to the use of fast-uri CVE-2026-18446. The fast-uri version has been updated within IBM ApplinX in order to address the vulnerability. Vulnerability Details CVEID:CVE-2026-18446 DESCRIPTION: fast-uri before 4.1.2, 3.1.5, a...