proxmark3

Iceman Fork - Proxmark3 The Proxmark3 is the swiss-army tool of RFID, allowing for interactions with the vast majority of RFID tags on a global scale. Originally built by Jonathan Westhues, the device is now the goto tool for RFID Analysis for the enthusiast. Iceman repository is considered to be...

FastMCP: Post-transform component authorization is skipped on direct calls

Maintainer assessment and remediation This report is accepted as a FastMCP authorization vulnerability. In supported configurations, a server transform can change the metadata used by a component's authorization policy. Direct lookups previously checked the original component but returned the...

FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server

Maintainer assessment and remediation This report is accepted as a FastMCP credential-binding vulnerability. Affected versions of the OAuth client credentials providers do not expose the authorization-server issuer that owns pre-registered credentials. An untrusted or compromised MCP server can...

CVE-2026-104001

The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running...

CVE-2026-104001 Slim SEO <= 4.11.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'Biographical Info' User Meta

The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running...

CVE-2026-104001 Slim SEO <= 4.11.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'Biographical Info' User Meta

The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running...

EUVD-2026-102669

The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running...

CVE-2026-104001

The Slim SEO – AI SEO Plugin for WordPress is vulnerable to arbitrary shortcode execution in versions up to and including 4.11.1 . The root cause is the software's failure to properly validate values before executing the do_shortcode function. This allows authenticated attackers with Subscriber-l...

CVE-2026-104001: Improper Control of Generation of Code

The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running...

WordPress Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin <= 4.11.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by Kuba in WordPress Plugin Slim SEO versions = 4.11.1...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +72 more potentially affected by CVE-2026-107286 via pydantic-ai-slim (>=2.10.0, <=2.52.0)

pydantic-ai-slim PYPI version =2.10.0, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =0.2.2 - bonsai-core 0.1.0 and more Source cves: CVE-2026-107286 Source advisory: OSV:PYSEC-2026-4285...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +72 more potentially affected by CVE-2026-107287 via pydantic-ai-slim (>=2.0.0b1, <=2.51.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107287 Source advisory: OSV:PYSEC-2026-4290...

agent-utilities (>=0.41.0, <=0.51.0), clai (>=1.77.0, <=1.107.1) +36 more potentially affected by CVE-2026-107294 via pydantic-ai-slim (>=1.77.0, <=1.107.1)

pydantic-ai-slim PYPI version =1.77.0, =0.41.0, =1.77.0, =0.0.445, =1.0.0, =1.1.0, =1.0.25, =0.1.102, =26.1.0, =0.1.1, =0.2.0, =26.1.0rc1, =26.1.0 and more Source cves: CVE-2026-107294 Source advisory: OSV:PYSEC-2026-4289...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +16 more potentially affected by CVE-2026-107294 via pydantic-ai-slim (>=2.0.0b1, <=2.23.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0rc0, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =2.0.0b1, =1.0.1, =0.26.0, =0.36.0 and more Source cves: CVE-2026-107294 Source advisory: OSV:PYSEC-2026-4289...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +18 more potentially affected by CVE-2026-107293 via pydantic-ai-slim (>=2.0.0b1, <=2.27.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0rc0, =0.0.2, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =2.0.0b1, =1.0.1, =1.1.0 and more Source cves: CVE-2026-107293 Source advisory: OSV:PYSEC-2026-4283...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +20 more potentially affected by CVE-2026-107295 via pydantic-ai-slim (>=2.0.0b1, <=2.27.1)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0, =0.1.0rc0, =0.7.0rc2, =0.0.2, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =0.2.2 and more Source cves: CVE-2026-107295 Source advisory: OSV:PYSEC-2026-4287...

agent-utilities (>=0.41.0, <=0.51.0), clai (>=1.77.0, <=1.107.6) +37 more potentially affected by CVE-2026-107287 via pydantic-ai-slim (>=1.77.0, <=1.107.6)

pydantic-ai-slim PYPI version =1.77.0, =0.41.0, =1.77.0, =0.0.445, =1.0.0, =1.1.0, =1.0.25, =0.1.102, =26.1.0, =0.1.1, =0.2.0, =0.2.1 - jupydeep 0.1.6 and more Source cves: CVE-2026-107287 Source advisory: OSV:PYSEC-2026-4290...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +21 more potentially affected by CVE-2026-107292 via pydantic-ai-slim (>=2.0.0b1, <=2.29.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0, =0.1.0rc0, =0.7.0rc2, =0.0.2, =0.1.12, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =2.29.0 and more Source cves: CVE-2026-107292 Source advisory: OSV:PYSEC-2026-4288...

agent-utilities (>=0.41.0, <=0.51.0), ara-cli (>=0.1.14.13, <=0.1.14.14) +61 more potentially affected by CVE-2026-107292 via pydantic-ai-slim (>=1.34.0, <=1.107.4)

pydantic-ai-slim PYPI version =1.34.0, =0.41.0, =0.1.14.13, =0.0.2, =1.34.0, =0.0.400, =1.0.0, =0.1.0, =1.6.2, =1.0.0, =1.0.0, =0.1.102, =0.1.366 and more Source cves: CVE-2026-107292 Source advisory: OSV:PYSEC-2026-4288...

agent-utilities (>=0.41.0, <=0.51.0), ara-cli (>=0.1.14.13, <=0.1.14.14) +61 more potentially affected by CVE-2026-107295 via pydantic-ai-slim (>=1.34.0, <=1.107.2)

pydantic-ai-slim PYPI version =1.34.0, =0.41.0, =0.1.14.13, =0.0.2, =1.34.0, =0.0.400, =1.0.0, =0.1.0, =1.6.2, =1.0.0, =1.0.0, =0.1.102, =0.1.366 and more Source cves: CVE-2026-107295 Source advisory: OSV:PYSEC-2026-4287...