Security Bulletin: Multiple Security Vulnerabilities in axios affect Content Cortex for Microsoft Office

Summary axios versions before 1.18.0 0.x: before 0.33.0 have multiple vulnerabilities CVSS up to 8.3, High. CVE-2026-67312/67313 are uncontrolled recursion issues in formDataToJSON that exhaust the call stack via deeply nested field names, causing denial of service. CVE-2026-67314/67316/67319 are...

Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Summary The per-entry percentages of a KDA asset's split royalties are validated by summing them into a uint32 accumulator and checking the sum against HundredPercent 10000, with no upper bound on each individual entry. Two split entries whose percentages sum to just over 2^32 wrap around below...

GHSA-CGC5-V3F2-8M2V Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Summary The per-entry percentages of a KDA asset's split royalties are validated by summing them into a uint32 accumulator and checking the sum against HundredPercent 10000, with no upper bound on each individual entry. Two split entries whose percentages sum to just over 2^32 wrap around below...

CVE-2025-7558-PoC

CVE-2025-7558-PoC सारांश code-projects Voting System 1.0 में एक महत्वपूर्ण critical भेद्यता पाई गई है। प्रभावित तत्व फ़ाइल /admin/positionsadd.php का एक अज्ञात फ़ंक्शन है। Description तर्क में इस प्रकार की हेरफेर SQL इंजेक्शन की ओर ले जाती है। यह भेद्यता CVE-2025-7558 के रूप में दर्ज है। हमला...

GHSA-P7GW-2PCP-5PF8 Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

Summary When a marketplace order is settled MarketBuy / BuyItNow, and auction Claim, the buyer's payment is split three ways — referral, royalties, and the seller market-order owner remainder: marketOwnerAmount = CurrentBid − referralAmount − royaltiesAmount Referral and royalties are paid out...

Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

Summary When a marketplace order is settled MarketBuy / BuyItNow, and auction Claim, the buyer's payment is split three ways — referral, royalties, and the seller market-order owner remainder: marketOwnerAmount = CurrentBid − referralAmount − royaltiesAmount Referral and royalties are paid out...

CVE-2026-82112

A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...

CVE-2026-50979

A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter...

CVE-2026-37736

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

GHSA-JW39-3688-R4RX Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Impact A Server-Side Template Injection SSTI vulnerability exists in multiple locations of trestle's Jinja2 rendering pipeline due to a systemic pattern: untrusted data is re-parsed as Jinja2 template source code without sandboxing. This advisory tracks the root cause across all affected code...

Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Impact A Server-Side Template Injection SSTI vulnerability exists in multiple locations of trestle's Jinja2 rendering pipeline due to a systemic pattern: untrusted data is re-parsed as Jinja2 template source code without sandboxing. This advisory tracks the root cause across all affected code...

CVE-2026-56854

A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. This oversight could allow a remote attacker to bypass intended network-based access control...

[R1] Stand-alone Security Patch Available for Tenable Enclave Security 1.7.0 and 1.8.0: SC-202608.1

R1 Stand-alone Security Patch Available for Tenable Enclave Security 1.7.0 and 1.8.0: SC-202608.1 Arnie Cabral Fri, 08/28/2026 - 12:01 Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below. Component| CVE ID | Severity |...

CVE-2026-0047-poc

CVE-2026-0047: Ausência de verificação de permissão no ActivityManagerService Um monte de bitmaps roubados de todos os aplicativos em execução — zero permissões, zero interação do usuário. A ausência de uma verificação enforceCallingOrSelfPermissionDUMP em ActivityManagerService.dumpBitmapsProto...

CVE-2026-35031

CVE-2026-35031: Path Traversal nel caricamento dei sottotitoli di Jellyfin che porta a RCE -darkred?style=flat-square -orange?style=flat-square TL;DR Una vulnerabilità critica di path traversal in Jellyfin Media Server consente agli utenti autenticati con il permesso "Upload Subtitles" di caricar...

Estudo-de-Caso-CVE-2024-21413

CVE-2024-21413 — Moniker Link 🔗💀 Microsoft Outlook RCE + Furto di Credenziali NTLM ⚠️ Avviso Legale: Questo repository è esclusivamente a scopo educativo e di ricerca sulla sicurezza. Tutte le dimostrazioni sono state eseguite in ambienti controllati e isolati. L'uso di queste tecniche contro...

Conti-Ransomware-DFIR-Investigation

Conti Ransomware — DFIR Investigation ProxyShell Exploitation...

CVE-2022-44830

Suggested description Die Sourcecodester Event Registration App v1.0 weist mehrere CSV-Injection-Schwachstellen über die Felder First Name, Contact und Remarks auf. Diese Schwachstellen ermöglichen es Angreifern, über eine präparierte Excel-Datei beliebigen Code auszuführen. Additional Informatio...

Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-Assessment

CVE-2025-31324 Strumento di Valutazione delle Vulnerabilità e Compromissione Zero-Day SAP Rilascio Congiunto da parte di Onapsis e Mandiant Onapsis e Mandiant hanno collaborato per rilasciare uno strumento open-source per assistere i clienti SAP nell'identificazione di potenziali compromissioni...

CVE-2024-50340

CVE-2024-50340 POC Requisiti L'opzione registerargcargv deve essere abilitata nel file di configurazione PHP php.ini. Questa impostazione carica gli argomenti della riga di comando e i parametri della query in $SERVER'argv'. https://www.php.net/manual/en/ini.core.phpini.register-argc-argv...