CVE-2026-5027

CVE-2026-5027 - Langflow Path Traversal zu Remote Code Execution Beschreibung Langflow-Versionen bis einschließlich 1.8.4 bereinigen den Parameter filename im Endpunkt POST /api/v2/files nicht. Ein Angreifer kann Pfad-Traversal-Sequenzen ../ verwenden, um Dateien an beliebige Stellen im Dateisyst...

CVE-2026-80571

A flaw was found in the Linux kernel's powerpc/pseries: papr-phy-attest component. This vulnerability arises from insufficient validation of a command length parameter, which can lead to a buffer overflow. Such an overflow could be exploited by a local attacker to potentially execute arbitrary co...

CVE-2023-7173

CVE-2023-7173: Stored Cross-Site Scripting XSS im Krankenhausverwaltungssystem Details zur Schwachstelle CVE-ID: CVE-2023-7173 Schwachstellentyp: Stored XSS Betroffene Komponente: Benutzer-Login-Seite Verwundbarer Parameter: Fullname Herstellerdetails: phpgurukul.com Verwundbare Version: Hospital...

CVE-2023-7172

CVE-2023-7172 Überblick Dieses Projekt enthält eine verwundbare Version eines Krankenhausverwaltungssystems Hospital Management System, HMS, das anfällig für SQL-Injection CVE-2023-7172 ist. SQL-Injection ist eine kritische Webanwendungs-Schwachstelle, die schwerwiegende Auswirkungen auf die...

Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation

= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X root@kitploit: README.md CVE-2026-0628: Chromium WebView Privilege Escalation Origin Spoofing – Technische Forschung & Proof-of-Concept Autor: Sastra Adi Wiguna Purple Elite Teaming Forschungsdatum: Januar 2026 CVE-ID: CVE-2026-062...

CVE-2026-33310

CVE-2026-33310 CVE-2026-33310 Iniezione di comandi tramite espansione shell nei valori predefiniti dei parametri Riepilogo La sintassi shell all'interno dei valori predefiniti dei parametri sembra essere espansa automaticamente durante il processo di parsing del catalogo. Se un catalogo contiene ...

SkillSpector v2.10.0

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 Link originale: https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye RCE tramite bypass della validazione lato client Riepilogo Durante il test di sicurezza di un'istanza MotionEye in esecuzione in Docker...

Security Bulletin: Multiple Vulnerabilities in IBM Concert Software

Summary Multiple vulnerabilities were addressed in IBM Concert Software version 3.0.0 Vulnerability Details CVEID:CVE-2026-26996 DESCRIPTION: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular...

log4j-scanner

log4j-scanner Ein Log4j-Schwachstellenscanner ist ein automatisierter Scanner, um Log4j-Schwachstellen CVE-2021-44228 und CVE-2021-45046 in Webanwendungen zu finden. Funktionen 1- Er unterstützt mehrere URLs für den Scan 2- Er verfügt über Payloads, die einige WAF umgehen können 3- Er unterstützt...

CVE-2026-35517

CVE-2026-35517 - Pi-hole FTLDNS Remote Code Execution durch Newline-Injection TL;DR Eine Remote Code Execution -Schwachstelle in der FTLDNS-Engine von Pi-hole Versionen 6.0 bis 6.5 ermöglicht es einem authentifizierten Angreifer, beliebige dnsmasq-Konfigurationsdirektiven zu injizieren, indem...

CVE-2026-22679

CVE-2026-22679: Weaver E-cology RCE non autenticato tramite Endpoint di Debug dubboApi -critical TL;DR Weaver E-cology 10.0 precedente alla build 20260312 contiene una vulnerabilità critica di esecuzione remota di codice non autenticata nell'endpoint /papi/esearch/data/devops/dubboApi/debug/metho...

Exploit for SQL Injection in Metabase

CVE-2026-72898 Metabase password-reset unauthenticated SQL inj...

CVE-2022-28906-POC

CVE-2022-28906 PoC Python-Proof-of-Concept für eine nicht authentifizierte Befehlsinjektion im TOTOLINK N600R. Schwachstelle Produkt| TOTOLINK N600R ---|--- Firmware| V5.3c.7159B20190425 Typ| OS-Befehlsinjektion CWE-78 Parameter| langType Endpunkt| /cgi-bin/cstecgi.cgi CVSS v3.1| 9.8 Kritisch Es...

CVE-2026-59355 Spring Authorization Server: Open Redirect via request_uri parameter

In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the requesturi parameter. An attacker can craft a request containing an invalid requesturi paired with an unvalidated redirecturi, which can result in an open redirect to...

CVE-2026-59355

Spring Authorization Server versions 1.5.0 through 1.5.7 are affected by an open redirect vulnerability in the authorization endpoint . The root cause is insufficient validation of the request_uri parameter : an attacker can craft a request containing an invalid request_uri paired with an unvalid...

CVE-2026-59355 Spring Authorization Server: Open Redirect via request_uri parameter

In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the requesturi parameter. An attacker can craft a request containing an invalid requesturi paired with an unvalidated redirecturi, which can result in an open redirect to...

EUVD-2026-66978

In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the requesturi parameter. An attacker can craft a request containing an invalid requesturi paired with an unvalidated redirecturi, which can result in an open redirect to...

CVE-2026-26331

Beliebige Befehlsinjektion über --netrc-cmd in yt-dlp Schweregrad: Hoch CVSS 8.8 Betroffene Software: yt-dlp = 2023.06.21, Behoben in: 2026.02.21 Advisory: GHSA-g3gw-q23r-pgqm CVE: CVE-2026-26331 Zusammenfassung Die Befehlszeilenoption --netrc-cmd von yt-dlp bzw. der Python-API-Parameter netrccmd...

EUVD-2026-66495

In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer modestring uses snprintf which can return a value larger than the remaining buffer space. showmodes accumulates the return value into i without checking whether i has reached...