CVE-2026-19610

A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and configurations. The issue occurs because the handler for the read-resource operation on the runtime management resource fails to perform required Role-Based Access Control RBAC...

Security Bulletin: Platform Navigator and Automation Assets in IBM Integration are vulnerable to a vulnerability in braces

Summary Platform Navigator and Automation Assets in IBM Integration are vulnerable to a vulnerability in braces. CVE-2026-93687 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-93687 DESCRIPTION: braces through 3.0.3 contains a stack overflow vulnerability in the recursi...

Security Bulletin: Platform Navigator and Automation Assets in IBM Integration are vulnerable to a vulnerability in source-map-js

Summary Platform Navigator and Automation Assets in IBM Integration are vulnerable to a vulnerability in source-map-js. CVE-2026-93749 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-93749 DESCRIPTION: source-map-js through 1.2.1 fails to validate the per-section offset...

CVE-2026-118477

The KaliFast Project Management Platform is vulnerable to OS Command Injection via the ei_git_repo_url parameter in the Git remote configuration endpoint. An authenticated attacker (with free registration available) can exploit this flaw to execute arbitrary commands on the server with www-data p...

CVE-2026-118477 KaliFast Project Management Platform ei_git_repo_url OS Command Injection

The eigitrepourl parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authenticated attacker free registration available to execute arbitrary commands on the KaliFast server with www-data privileges...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16 CNF IBU extras update

An update for ibu components is available for Red Hat OpenShift Container Platform 4.16. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the extra ibu container...

pupy

Pupy Simple Installation pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install git clone https://github.com/n1nj4sec/pupy cd pupy git checkout nextgen git submodule init git...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14 CNF IBU extras update

An update for ibu components is available for Red Hat OpenShift Container Platform 4.14. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the extra ibu container...

CVE-2026-16020

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fazile BACAK DefterAsist Financial Advisor Platform allows Stored XSS. This issue affects DefterAsist Financial Advisor Platform: through 2026-10-27...

EUVD-2026-111826

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fazile BACAK DefterAsist Financial Advisor Platform allows Stored XSS. This issue affects DefterAsist Financial Advisor Platform: through 2026-10-27...

CVE-2026-16020

The Fazile BACAK DefterAsist Financial Advisor Platform is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This issue affects versions of the platform through 2026-10-27 . The vulnerability allows an attacker to inject mal...

CVE-2026-16020 Stored XSS Fazile BACAK's DefterAsist Financial Advisor Platform

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fazile BACAK DefterAsist Financial Advisor Platform allows Stored XSS. This issue affects DefterAsist Financial Advisor Platform: through 2026-10-27...

WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Hung Bach Ngoc - VinSOC @tomchuoi in WordPress Plugin Buddyboss Platform versions = 3.5.0...

gophoner

gophoner​​ Check simultaneously if a phone number is registered on popular apps & websites, without any prerequisite. Please star & share this repository if you find it useful ⭐ Table of Contents Disclaimer Features Installation Usage Supported Modules Roadmap Legal & Ethical Use License Credits...

Barco/AWIND OEM Presentation Platform - Remote Command Injection

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...

SAP Memory Pipes (MPI) Desynchronization

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable to request smuggling and request concatenation attacks. An unauthenticated attacker can prepend a victim's request with arbitrary data. This...

Oracle Business Intelligence Publisher (October 2026 CPU)

The 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI...

Vulnerability related to the software supply chain issue in Red Hat JBoss Enterprise Application Platform

Red Hat JBoss Enterprise Application Platform versions 7 and 8 contain a vulnerability related to the software supply chain. This vulnerability arises because the JDKBridge in openjdk-orb trusts a CDR code library URL provided by attackers when performing object deserialization on port 3528. As a...

Fazile BACAK DefterAsist Financial Advisor Platform Cross-site Scripting Vulnerability

Fazile BACAK DefterAsist Financial Advisor Platform versions 2026-10-27 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

CVE-2026-16020: Fazile BACAK DefterAsist Financial Advisor Platform: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fazile BACAK…

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fazile BACAK DefterAsist Financial Advisor Platform allows Stored XSS. This issue affects DefterAsist Financial Advisor Platform: through 2026-10-27...