CVE-2026-55200

CVE-2026-55200 - Critical libssh2 Remote Code Execution Vulnerability Critical Pre-Authentication Memory Corruption Vulnerability in libssh2 Overview...

GHSA-3CGP-3CQX-J8W2 Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree

Summary Chat histories are stored as an unvalidated JSON object. After a message is deleted, the code that picks the chat's new current message walked down the childrenIds links without recording where it had already been. Any account with the default user role could store a chat whose messages...

Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree

Summary Chat histories are stored as an unvalidated JSON object. After a message is deleted, the code that picks the chat's new current message walked down the childrenIds links without recording where it had already been. Any account with the default user role could store a chat whose messages...

EUVD-2026-75185

Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree...

Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

GHSA-JQHH-CJMQ-VMV6 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

EUVD-2026-75188

Open WebUI: Any authenticated user can hang the server via a cyclic chat message history...

CVE-2026-39047

PrintHack - Printer Security Testing Tool root@kitploit: | | | | | | \ | \ | | | | | | | | | | | | | | | | | ⚠️ DISCLAIMER : This tool is intended for legitimate security testing and educational purposes only. Use responsibly and only on systems you own or have explicit authorization to test. 🎯...

mesh-kridik

mesh-kridik ¡Mejora la seguridad de tu malla de servicios de Kubernetes! mesh-kridik es un verificador de seguridad de código abierto que realiza varias comprobaciones de seguridad en un clúster de Kubernetes con malla de servicios Istio y genera un informe de seguridad. Las pruebas de comprobaci...

CVE-2026-87931

A buffer overflow vulnerability exists in the Apple Notification Center Service Event Handler component of the Behavioral Technology Group Pavlok Behavioral Conditioning Wearable , affecting versions up to 20260707. The attack requires the attacker to be within the local network (adjacent network...

reverse-shell

reverse-shell Reverse Shell como servicio - https://reverse-shell.sh Reverse shell fácil de recordar que debería funcionar en la mayoría de sistemas tipo Unix. Detecta el software disponible en el objetivo y ejecuta un payload apropiado. Uso 1. Escucha la conexión En tu máquina, abre un puerto y...

CVE-2021-21341

CVE-2021-21341 XStream DoS XStream Official Announcement CVE-2021-21341 Vulnerability CVE-2021-21341: XStream can cause a Denial of Service. Affected Versions All versions until and including version 1.4.15 are affected, if using the version out of the box. No user is affected, who followed the...

CVE-2026-15460

The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...

CVE-2026-26903-PoC

CVE-2026-26903 PoC Denial-of-service via unbounded recursion in TanStack Query'sreplaceEqualDeep function A single crafted query update with deeply nested objects can freeze the JavaScript thread indefinitely , causing complete application unresponsiveness. No authentication or special permission...

faxhell

faxhell "Fax Shell" Un shell de enlace de prueba de concepto que utiliza el servicio Fax y un secuestro de DLL basado en Ualapi.dll. Consulte nuestro análisis en: https://windows-internals.com/faxing-your-way-to-system/ Cómo usar Compila Ualapi.dll y colócalo en c:\windows\system32 Inicia el...

CVE-2026-15460 Missing channel-state validation in Zephyr Bluetooth Classic L2CAP receive path

The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...

EUVD-2026-75212

The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...

CVE-2026-15460

CVE-2026-15460 affects Zephyr RTOS Bluetooth Classic (BR/EDR) L2CAP, specifically the receive handler bt_l2cap_br_recv() in subsys/bluetooth/host/classic/l2cap_br.c. The handler dispatched inbound data PDUs based solely on the destination channel ID without verifying the channel had reached BT_L2...

CVE-2026-24417

CVE-2026-24417: OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service Overview...

CVE-2022-25943

CVE-2022-24934 Vulnerability Overview When installing WPS Office, the service program wpscloudsvr is installed with administrator privileges. This service is configured for manual start, but the access control list ACL attributes of the folder where the service program resides are misconfigured...