CVE-2026-82253

gitoxide Rust crates gix = 0.72.0 and gix-validate = 0.10.0 contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.findb"..", allowing crafted names such as 'a..b/../../../.git/' to bypass the check;...

CVE-2026-82256

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...

CVE-2026-82259

SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...

CVE-2026-82111

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component uploadimage. Performing a manipulation of the argument imagepath results in path traversal. The attack can be initiated remotely. The...

CVE-2026-6128

The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ai1wmbackupspath' parameter in all versions up to, and including, 2.84. This is due to insufficient input sanitization and output escaping on user-supplied attributes combine...

CVE-2026-18393

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

Security update for python36

This update for python36 fixes the following issues: CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF bytes bsc1261969...

CVE-2024-30051

CVE-2024-30051 — Estouro de Heap no DWM do Windows para EoP · Pesquisa de Tese de Mestrado -orange Estouro de Buffer Baseado em Heap no Gerenciador de Janelas da Área de Trabalho do Windows dwmcore.dll Escalação de Privilégio Local → Nível de Integridade SYSTEM via processo DWM Alvo de compilação...

CVE-2019-0708-Windows

CVE-2019-0708-Windows Questo articolo condivide la vulnerabilità del servizio Desktop remoto di Windows CVE-2019-0708 e spiega nel dettaglio la vulnerabilità e le misure difensive. L'autore, un principiante della sicurezza informatica, condivide alcuni tutorial di autoapprendimento di base,...

pdf.js-CVE-2024-4367

🚨 CVE-2024-4367 - Universeller PDF.js-Schwachstellenscanner ⚠️ KRITISCHES SICHERHEITSTOOL | Erkennt CVE-2024-4367 CVSS 9.8 - Sicherheitslücke zur Remote-Codeausführung in PDF.js Funktioniert auf JEDER Website - Keine Konfiguration erforderlich 📋 Inhaltsverzeichnis 📖 Übersicht ⚡ Schnellstart 🔍 Was...

CVE-2025-32462_32463-Lab

CVE-2025-32462 & CVE-2025-32463 – PoC-Labor Dies ist ein containerbasiertes Labor und PoC für die folgenden Schwachstellen in sudo: CVE-2025-32462 – sudo -h Bypass der Host-Matching-Logik CVE-2025-32463 – sudo -R Chroot-NSS-Bibliotheks-Escape 🔒 Nur zu Bildungszwecken. Nicht auf Systemen verwenden...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0)

Summary Vulnerabilities exists in IBM Cloud Pak for Data System CPDS 1.0 addressed in 11.3.1.2-IF1 Vulnerability Details CVEID:CVE-2025-13465 DESCRIPTION: Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the .unset and .omit functions. An attacker can pass crafted...

CVE-2026-82112 houtini-ai houtini-lm code_task_files index.ts path traversal

A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...

CVE-2026-82112

A path traversal vulnerability exists in the houtini-ai/houtini-lm project (versions up to 2.13.2 ), specifically in the code_task_files component within src/index.ts . A remote attacker with low privileges and user interaction can manipulate an unknown function to read files outside the intended...

EUVD-2026-67712

A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...

CVE-2026-82112 houtini-ai houtini-lm code_task_files index.ts path traversal

A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...

CVE-2026-82112 houtini-ai houtini-lm code_task_files index.ts path traversal

A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...

CVE-2022-43293

Exploits para CVE-2022-43293 Para obter uma Negação de Serviço persistente no Windows conforme mostrado na POC acima, basta executar Exploit.bat e digitar %windir%\system32\cng.sys quando for perguntado qual arquivo deseja sobrescrever. Aqui você encontra meu relatório de Vulnerabilidade de...

EEF-CVE-2026-75758 Unbounded recursion between Inspect.List charlist rendering and List.to_string/1 error path in Elixir

Summary Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.to\string/1, or List.to\charlist/1 to exhaust a BEAM node's memory. Inspect.List's charlist branch in lib/elixir/lib/inspect.ex classifies a list as a...

CVE-2025-55182-Waf

Scanner ed Exploit per Next.js/React RSC - RCE Questo strumento è progettato per ricercatori di sicurezza e penetration tester per rilevare e sfruttare la vulnerabilità CVE-2025-55182 nelle applicazioni Next.js/React RSC. Fornisce multiple modalità di scansione, funzionalità di sfruttamento e...