CVE-2026-54745 Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...

EUVD-2026-67790

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...

CVE-research

CVE-research Un repository che contiene tutti i PoC funzionanti che ho creato per CVE note e dettagli sulla ricerca in corso che sto attualmente svolgendo per lo più dispositivi IoT Nota sugli script/payload di exploit PoC funzionanti 1. Usa gli script di exploit in modo etico e responsabile! Non...

CVE-2026-75486 Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name

Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters..optic-ci.original branch name field. The expectGitBranch function in...

CVE-2026-75486 Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name

Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters..optic-ci.original branch name field. The expectGitBranch function in...

EUVD-2026-67789

Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters..optic-ci.original branch name field. The expectGitBranch function in...

CVE-2026-75486

Synk Sweater Comb (Snyk) before 3.8.8 contains a command injection vulnerability. The root cause is in the expectGitBranch() function in src/lint.ts, which passes an unsanitized branch name—sourced from the linters..optic-ci.original field in the .vervet.yaml configuration file—directly into chil...

CVE-2026-33910_SqlInjectionVulnerabilityOpenEMR8.0.0.2

CVE-2026-33910 - Vulnerabilità di SQL Injection in OpenEMR Debolezza CWE-89 Neutralizzazione impropria degli elementi speciali usati in un comando SQL 'SQL Injection' Il prodotto costruisce tutto o parte di un comando SQL utilizzando input influenzati esternamente da un componente a monte, ma non...

CVE-2026-75124 PLANET GS-4210-16P2S Memory Corruption via dispatcher.cgi _readHttpParam

PLANET GS-4210-16P2S firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parsequerystring to process...

EUVD-2026-67784

PLANET GS-4210-16P2S firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parsequerystring to process...

CVE-2026-75124 PLANET GS-4210-16P2S Memory Corruption via dispatcher.cgi _readHttpParam

PLANET GS-4210-16P2S firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parsequerystring to process...

CVE-2026-75124

PLANET GS-4210-16P2S firmware prior to 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface. The root cause is in the _readHttpParam function, which copies an oversized HTTP query string without guaranteeing NUL termination, allowing parse_que...

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code

Cybersecurity researchers have discovered a cluster of 18 Google Chrome and one Microsoft Edge extensions that were published over the last six months and harbored wallet secret stealing and cryptocurrency draining capabilities. The extensions, per Socket security researcher Karlo Zanki, share...

HTB-Reactor-Linux-Machine-Walkthrough

HTB: Reactor !CAUTION Avviso di spoiler. Questa è una walkthrough completa che include le flag. Se vuoi risolvere la macchina da solo, chiudi questa pagina adesso e torna quando sei bloccato. Informazioni sulla macchina Campo| Dettagli ---|--- Nome| Reactor OS| Ubuntu 24.04 LTS Noble Difficoltà|...

CVE-2026-13156

CVE-2026-13156 — Integrazione SMTP Ufficiale MailerSend !IMPORTANT Abstract: È stata scoperta una vulnerabilità di Cross-Site Request Forgery CSRF ad alta severità CVE-2026-13156 nel plugin ufficiale MailerSend SMTP Integration per WordPress 1.0.8. L'handler di cancellazione della configurazione...

CS-Remote-OPs-BOF

BOF de Operações Remotas Este repositório serve como um complemento ao nosso repositório SA lançado anteriormente. Nossa posição original era que não disponibilizaríamos nossas ferramentas que modificam outros sistemas, e forneceríamos apenas ferramentas de coleta de informações em um formato...

fireprox

FireProx Overview Benefits Disclaimers Maintainer Credit Basic Usage Installation Screenshots Contributing Overview Being able to hide or continually rotate the source IP address when making web calls can be difficult or expensive. A number of tools have existed for some time but they were either...

CVE-2026-43499-RMX5200

CVE-2026-43499 per realme RMX5200 Escalation locale dei privilegi SO per: Elemento| Valore ---|--- Dispositivo| realme RMX5200 / RE6030L1 Android| 16 Kernel| 6.12.23-android16-5-gb2a876903b49-ab14541642-4k Fingerprint| realme/RMX5200/RE6030L1:16/BP2A.250605.015/...:user/release-keys Binario...

CVE-2024-50491

CVE-2024-50491 RSVP ME = 1.9.9 - अप्रमाणित SQL इंजेक्शन विवरण RSVP ME WordPress प्लगइन 1.9.9 तक के संस्करणों में SQL इंजेक्शन के लिए संवेदनशील है, क्योंकि उपयोगकर्ता द्वारा प्रदान किए गए पैरामीटर पर अपर्याप्त एस्केपिंग और मौजूदा SQL क्वेरी पर पर्याप्त तैयारी का अभाव है। इससे अप्रमाणित हमलावरों के...

pybof

PyBOF Execute Beacon Object files por meio do python carregamento e execução em memória de BOFs O PyBOF permite que o Python3 carregue Beacon Object Files via bytes e execute uma função BOF alvo em um interpretador Python Uso Básico Executar um BOF simples sem argumentos obrigatórios root@kitploi...