CVE-2026-85582 SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory. Attackers can repeatedly authenticate with valid credentials to create persistent session entries without expiry or...

CVE-2026-85582 SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory. Attackers can repeatedly authenticate with valid credentials to create persistent session entries without expiry or...

EUVD-2026-71005

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory. Attackers can repeatedly authenticate with valid credentials to create persistent session entries without expiry or...

CVE-2026-85582

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory. Attackers can repeatedly authenticate with valid credentials to create persistent session entries without expiry or...

CVE-2026-85582

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler . Authenticated attackers can repeatedly authenticate with valid credentials to create persistent session entries without expiry or capacity limits, causing indefinite proce...

CLSA-2026-1788514837 tomcat: Fix of CVE-2026-73180

CVE-2026-73180: track the WebSocket sessions of an authenticated HTTP session by a key held in a session attribute rather than the live session id, so they are still closed when the HTTP session ends after its id has changed upstream tomcat 9.0.121...

CVE-2026-85525

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

CVE-2026-85525 Improper OCSP response validation in Snowflake drivers

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

CVE-2026-85525 Improper OCSP response validation in Snowflake drivers

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

CVE-2026-85094

The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session...

CVE-2026-85085

The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView. A threat actor who controls the page loaded by the user is able to communicate with Canva using the user’s session...

PineApp Mail-SeCure test_li_connection RCE

Exploits command injection in PineApp Mail-SeCure via the iptest parameter on /admin/testliconnection.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """PineApp Mail-SeCure testliconnection.php RCE — execute session.""" from future import annotations import re...

AlienVault OSSIM av-centerd RCE (CVE-2014-3804)

Exploits CVE-2014-3804 command injection in the av-centerd updatesysteminfodebianpackage SOAP method. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """AlienVault OSSIM av-centerd SOAP RCE CVE-2014-3804 — execute session.""" from future import annotations import r...

CrushFTP CVE-2023-43177 Detection

Detects CVE-2023-43177 by confirming AS2 header injection on an anonymous session getUsername reflects forged username. !/usr/bin/env python3 -- coding: utf-8 -- """CrushFTP session hijacking + JDBC driver RCE CVE-2023-43177 detection.""" import re from kittysploit import from...

nostromo nhttpd RCE (CVE-2019-16278)

Exploits CVE-2019-16278 directory traversal in httpverify to invoke /bin/sh on nostromo nhttpd = 1.9.6. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """nostromo nhttpd path traversal RCE CVE-2019-16278 — execute session.""" from future import annotations import ...

CrushFTP Unauthenticated RCE (CVE-2023-43177)

Exploits CVE-2023-43177 AS2 header injection to read sessions.obj, hijack or escalate to an administrator session, upload a malicious JDBC driver JAR, and execute a reverse CMD payload via testDB. CrushFTP versions prior to 10.5.1. !/usr/bin/env python3 -- coding: utf-8 -- """CrushFTP...

EUVD-2026-70915

The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session...

CVE-2026-85094

The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session...

CVE-2026-85094

Canva Android App versions prior to 2.376.0 failed to restrict HTTP headers returned to an external origin running in a privileged WebView . An attacker who gains control of the WebView could read those headers and access a user's session . The CVSS 3.1 score is 8.8 (HIGH) , with a network vector...

CVE-2026-85094

The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session...