evil-winrm v4.1

Evil-WinRM !Version-shield !Ruby2.3-shield !Gem-Version !License-shield !Docker-shield The ultimate WinRM shell for hacking/pentesting Description & Purpose This shell is the ultimate WinRM shell for hacking/pentesting. WinRM Windows Remote Management is the Microsoft implementation of...

CVE-2026-85693 Chatbot UI Cross-User Private File Content Disclosure via Retrieval API

Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private file content belonging to other users by supplying arbitrary file UUIDs. The endpoint uses a service-role Supabase client that bypasses row-level security and...

CVE-2026-85691 MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/url

MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that fetches caller-supplied URLs server-side. Attackers can supply internal service URLs or metadata endpoints without authentication to read their responses directly from the JSON...

CVE-2026-85691 MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/url

MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that fetches caller-supplied URLs server-side. Attackers can supply internal service URLs or metadata endpoints without authentication to read their responses directly from the JSON...

CVE-2026-85691 MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/url

MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that fetches caller-supplied URLs server-side. Attackers can supply internal service URLs or metadata endpoints without authentication to read their responses directly from the JSON...

CVE-2026-85650

Trigger.dev before 4.5.2 contains a server-side request forgery vulnerability in webhook alert channel delivery URLs that are fetched without validation or SSRF protection. Authenticated users with organization membership can create alert channels with URLs targeting internal services and metadat...

CVE-2026-85650 Trigger.dev before 4.5.2 Server-Side Request Forgery via webhook alert-channel

Trigger.dev before 4.5.2 contains a server-side request forgery vulnerability in webhook alert channel delivery URLs that are fetched without validation or SSRF protection. Authenticated users with organization membership can create alert channels with URLs targeting internal services and metadat...

CVE-2026-85513

creationtimestamp| type| source ---|---|--- 2026-09-04 13:30:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d2zsqmklqrkun...

CVE-2026-85614

creationtimestamp| type| source ---|---|--- 2026-09-04 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muozyctl5y2l 2026-09-04 14:07:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mup5762f3a2w...

CVE-2026-78596

creationtimestamp| type| source ---|---|--- 2026-09-04 12:40:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoydcqpi623...

CVE-2026-82299

creationtimestamp| type| source ---|---|--- 2026-09-04 12:40:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoydcqpi623...

CVE-2026-78583

creationtimestamp| type| source ---|---|--- 2026-09-04 12:40:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoydcqpi623 2026-09-09 23:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mv4pe63ej32b...

Use of Single-factor Authentication

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Use of Single-factor Authentication through the removeTwofactorConfig process and the twofactorenabled form field, which are accessible via POST...

CVE-2026-80536

creationtimestamp| type| source ---|---|--- 2026-09-04 12:35:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoy24g4c32a...

CVE-2026-80583

creationtimestamp| type| source ---|---|--- 2026-09-04 12:35:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoy24g4c32a...

CVE-2026-85403

creationtimestamp| type| source ---|---|--- 2026-09-04 11:08:16+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muot6j7pgy2u...

CVE-2026-85546

creationtimestamp| type| source ---|---|--- 2026-09-04 10:56:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4hdkxyhjnkx75...

CVE-2026-84428

creationtimestamp| type| source ---|---|--- 2026-09-04 10:27:32+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3muoqvmwms225 2026-09-04 13:06:39+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3muozs7o5py2y 2026-10-01 12:30:29+00:00| seen|...

GHSA-PFVF-FWFP-25MP

creationtimestamp| type| source ---|---|--- 2026-09-04 10:00:16+00:00| seen| https://bsky.app/profile/strawberry.rocks/post/3muopeviwkv2k 2026-10-09 16:30:32+00:00| seen| https://gist.github.com/alon710/3f4a231234c89945ddbbd06ebc24e753...

CVE-2026-76169

creationtimestamp| type| source ---|---|--- 2026-09-04 09:54:28+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3muop2ikyjc25 2026-10-01 10:30:31+00:00| seen| https://gist.github.com/alon710/a1265d04bb89bd5ad393ac2683538928...