PT-2026-39586

Dell Automation Platform versions prior to 2.0.0.0, contains a missing authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

📄 S2M Forgot Password Endpoint Token Exposure

This Python script demonstrates a security assessment targeting a forgot-password API endpoint in a digital payment platform operated by S2M, a company specializing in secure electronic transactions and payment processing solutions. The script sends a crafted POST request using a known email...

PT-2026-39712

Open edX Platform enables the authoring and delivery of online learning at any scale. The HTML sanitizer clean thread html body used for discussion notification emails fails to remove tags from user-generated discussion post content. This content is rendered with Django's |safe template filter in...

PT-2026-39859

Name of the Vulnerable Software and Affected Versions DeepChat versions prior to 1.0.4-beta.1 Description An incomplete mitigation for a previous issue allows for an arbitrary protocol execution bypass, which can lead to remote code execution RCE. While restrictions were applied to the...

Open edX Platform 代码问题漏洞

The Open edX Platform is an open-source course management system developed by Open edX. This system can be used for MOOCs Massive Open Online Courses as well as smaller courses and training modules. The Open edX Platform has code vulnerabilities that stem from the syncproviderdata endpoint in the...

WWBN AVideo 代码问题漏洞

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to version 29 contain code vulnerabilities. These vulnerabilities stem from an unvalidated donation notification Webhook URL, which may allow attackers to access internal or cloud...

CVE-2026-34314

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Platform. Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Difficult to exploit vulnerability allows low privileged attacker wit...

GHSA-7PWC-H2J2-RJGJ vulnerabilities

Vulnerabilities for packages: spark, wavefront-proxy, zipkin...

CVE-2021-47907

Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authenticated users to inject malicious script code through the title parameter. Attackers can submit support tickets with embedded HTML/JavaScript payloads that execute in the browser...

GHSA-HM8Q-7F3Q-5F36 vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, wazuh-dashboard-fips, opensearch-dashboards-fips, kibana, langfuse, wazuh-dashboard, opensearch-dashboards...

CVE-2026-44458 vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, wazuh-dashboard-fips, opensearch-dashboards-fips, kibana, langfuse, wazuh-dashboard, opensearch-dashboards...

GHSA-QP7P-654G-CW7P vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, wazuh-dashboard-fips, opensearch-dashboards-fips, kibana, langfuse, wazuh-dashboard, opensearch-dashboards...

GHSA-V8VW-GW5J-W7M6 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-42571

Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...

EUVD-2026-28931

Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...

CVE-2026-44664 vulnerabilities

Vulnerabilities for packages: renovate...

GHSA-JP94-3292-C3XV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

CoreExploit-Final

CoreExploit 🔐 Ethical Penetration Testing Learning Platfor...

RHSA-2026:12273 Red Hat Security Advisory: OpenShift Container Platform 4.12.88 packages and security update

Bulletin has no description...

CVE-2026-42308

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0...