CVE-2026-81180 SysReptor: Authenticated RCE by insecure image processing

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...

CVE-2026-81180 SysReptor: Authenticated RCE by insecure image processing

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...

cisco-sa-sma-attack-N9bf4

Vérification d'exposition Cisco SMA Petit script Python 3 en un seul fichier pour sonder rapidement un hôte ou un domaine à la recherche de ports de gestion et de quarantaine ouverts pour Cisco Secure Email/Secure Malware Analytics indicateurs d'exposition CVE-2025-20393. Utilisation Installez...

Improper Validation of Certificate with Host Mismatch

Overview anyio is a High level compatibility layer for multiple asynchronous event loop implementations Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch via TLSStream.wrap in src/anyio/streams/tls.py, which resolves international domain nam...

geometron (>=0.0.1.dev7, <=0.0.3), metaplex-python-api (>=1.0.0, <=1.3.0) +1 more potentially affected by CVE-2026-63374 via anyio (3.3.4)

anyio PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - geometron =0.0.1.dev7, =1.0.0, =1.4.46, =3.0.3 Source cves: CVE-2026-63374 Source advisory: OSV:GHSA-82R6-8W77-94W6...

Allocation of Resources Without Limits or Throttling

Overview anyio is a High level compatibility layer for multiple asynchronous event loop implementations Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in processworker within src/anyio/toprocess.py, where stderr in a worker subprocess is...

geometron (>=0.0.1.dev7, <=0.0.3), metaplex-python-api (>=1.0.0, <=1.3.0) +1 more potentially affected by CVE-2026-64847 via anyio (3.3.4)

anyio PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - geometron =0.0.1.dev7, =1.0.0, =1.4.46, =3.0.3 Source cves: CVE-2026-64847 Source advisory: OSV:GHSA-5P39-CFHJ-2XMP...

CVE-2026-33625

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1 through 0.12.2 contain a code injection vulnerability in "lmdeploy/pytorch/config.py" line 620 that allows an attacker to execute arbitrary Python code by publishing a malicious HuggingFace model...

AZL-103481 CVE-2026-93687 affecting package python-tensorboard 2.16.2-6

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2025-53837

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

CVE-2025-53837

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

CVE-2025-53837 org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

EUVD-2025-210935

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

Weblate: wlc: Project-wide download fails part-way and leaves stale archives on disk; filesystem errors surface as raw Python tracebacks.

The wlc command-line client did not properly handle filesystem errors, which caused two distinct issues. First, when project-wide downloads failed partway through, already-written archives were left on disk with no report of which components succeeded or failed, making it impossible to distinguis...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-45149 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max...

Syntecxhub_Web-Vulnerability-Scanner

Syntecxhub Web Vulnerability Scanner A Python-based web vulne...

embedded-exploitation

Embedded Exploitation Framework Research & Educational Se...

CLEANSTART-2026-NQ59682 Security fix for CVE-2024-52616 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HQ46365 Security fix for CVE-2023-38473 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AV29205 Security fix for CVE-2024-52615 applied in: playwright-python 1.54.0-r1

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...