CVE-2026-72589

An OS command injection vulnerability affects alseambusher/crontab-ui up to version 0.4.2. An unauthenticated remote attacker can trigger arbitrary system commands by importing a crafted crontab database file via POST /import, which accepts arbitrary .db files and overwrites the application datab...

EUVD-2026-55217

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files and overwrites the application database...

CVE-2026-72589 alseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook Field

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files and overwrites the application database...

CVE-2026-72580

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directl...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 – MCPJam Inspector Unauthenticated RCE PoC...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744-PoC Disclaimer: This proof-of-concept...

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code VS Code extension named Solidity Pro "solidity-pro" that has been observed delivering a browser wallet and credential stealer. The names of the extensions are below - helper-beeps.solidity-pro web3devtoolsx.solidity-p...

OpenSMTPD - MAIL FROM Command Injection Detection (CVE-2020-7247)

Detects OpenSMTPD CVE-2020-7247 by sending a crafted MAIL FROM address containing shell metacharacters MAIL FROM: and checking whether the server accepts it with a 250 Ok response. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSMTPD MAIL FROM command injection CVE-2020-7247.""" import secrets...

deepslop

DEEPSLOP — PS5 WebKit Exploit Kit 13.60 / WebKit RCE كيت اس...

PT-2026-69924

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.8 Description The getRegistryCommands function in packages/server/src/utils/cluster/upload.ts fails to escape the registry.password and registry.registryUrl variables when interpolating them into a shell command...

PT-2026-69852

Name of the Vulnerable Software and Affected Versions OpenCart version 4.2.0.0 Description The extension installer fails to validate that extracted paths from uploaded .ocmod.zip files remain within the intended directory. This allows an attacker to use directory traversal sequences, such as ../,...

PT-2026-69909

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy is a self-hostable Platform as a Service PaaS. A shell injection flaw exists in the apps/dokploy/server/api/routers/destination.ts file where the destination.testConnection mutation...

Linux Distros Unpatched Vulnerability : CVE-2026-68276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: fix cleaner shader IB buffer overflow The cleaner shader sysfs path allocate...

PT-2026-69905

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description An issue exists in the local branch of the '/docker-container-terminal' endpoint within the docker-container-terminal.ts file. While the system uses validateRequest for authentication, it fails to...

PT-2026-69920

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy is a self-hostable Platform as a Service PaaS. A flaw exists where the settings.readTraefikFile endpoint in apps/dokploy/server/api/routers/settings.ts passes a path to the readConfigInPath...

PT-2026-69327

Name of the Vulnerable Software and Affected Versions saithink/saigroup SaiAdmin versions prior to 5.0.2 Description A flaw in the Plugin Upload Endpoint allows for unrestricted file upload. This issue occurs within the shell exec function located in the /app/saipackage/install/upload file,...

PT-2026-76475

Summary The terminal WebSocket route authenticates its own first-message JWT instead of going through the HTTP dependency chain, and never applies the role check that get verified user enforces on every HTTP terminal route. An account whose role is pending, meaning registered but not approved, or...

PT-2026-69922

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description An authenticated user with application create or update permissions can execute arbitrary commands on the local build host or a remote SSH build target. This occurs because the dockerImage field is...

PT-2026-69886

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description The createCommand function constructs shell commands by interpolating compose service names and configuration into bash command strings. If a compose file with a maliciously crafted name or service...

CVE-2026-72863: Improper Privilege Management

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy's WebSocket handlers in-app terminals and log streamers authenticate the session but never authorize it. They establish who the user is via validateRequest and then proceed without consulting the role/permissio...