Plex Media Server < 1.43.3.10861 - SSRF via Transcoder

Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. id: CVE-2026-96655 info: name: Plex Media Server 1.43.3.10861 - SSRF via Transcoder author: DhiyaneshGeek severity: medium...

CVE-2026-111753

The @angular/common package's HttpClient function xsrfInterceptorFn is vulnerable to XSRF token leakage due to a URL parsing discrepancy between a regular expression and the browser's WHATWG URL parser . Because the regex does not normalize certain characters—such as backslashes, control characte...

Koh

Koh Koh is a C and Beacon Object File BOF toolset that allows for the capture of user credential material via purposeful token/logon session leakage. Some code was inspired by Elad Shamir's Internal-Monologue project no license, as well as KB180548. For why this is possible and Koh's approeach, s...

Chainguard Forks caniko input validation error vulnerability

Versions of Chainguard Forks prior to Kaniko 1.25.20 contain a security vulnerability. This vulnerability arises from using unanchored regular expressions to validate ACR registries, allowing spoofed hosts containing strings such as .azurecr.io to be accepted. As a result, Microsoft Entra ID acce...

CVE-2025-51471-POC

CVE-2025-51471 - Ollama Cross-Domain Token Exposure PoC Author: ajtazer 🔥 Overview This repository contains a Proof of Concept PoC for CVE-2025-51471 , a Cross-Domain Authentication Token Exposure vulnerability that affects all versions of Ollama including the latest. 📋 Vulnerability Description...

CVE-2026-41940

CVE-2026-41940 Auto Exploit Overview CVE-2026-41940 is a proof-of-concept PoC exploit targeting cPanel/WHM. This exploit demonstrates an unauthenticated authentication bypass using CRLF injection to leak security tokens and gain root-level access to the WHM interface, allowing for actions such as...

cPanelWHM-AuthBypass

cPanel/WHM Auth Bypass Scanner & Exploit Tool A Go command-line tool rewritten from the Python PoC by watchTowr, used to detect and exploit the CVE-2026-41940 cPanel/WHM authentication bypass vulnerability. Vulnerability Overview CVE-2026-41940 is an authentication bypass vulnerability in...

CVE-2026-117681 Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyone

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security TLS certificate verification for connections to internal backend services in environments lacking a default service certificate authority...

CVE-2026-45049 OpenAM Session Hijacking via CDSSO

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the Cross-Domain Single Sign-On CDSSO servlet allows a logged-in user's raw OpenAM session token to be POSTed to an attacker-controlled URL. An attacker who induces an authenticated victim to visit a crafted URL can...

GHSA-JFGX-762W-99VR @angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)

An incomplete fix for GHSA-58c5-g7wp-6w37 CVE-2025-66035 in @angular/common's HTTP Client HttpClient allows Cross-Site Request Forgery XSRF tokens to be leaked to attacker-controlled cross-origin domains when requests use URLs that exploit parsing discrepancies between regular expressions and the...

AZL-109896 CVE-2026-92287 affecting package ceph 18.2.2-13

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...

CVE-2026-92287

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...

OpenShift KMS Plugin for Key Vault server request forgery vulnerability

Version 3 of the OpenShift KMS Plugin for Key Vault contains a server-side request forgery vulnerability. This vulnerability arises because the Kroxylicious Azure Key Vault KMS provider fails to validate the format of vaultName values extracted from network-reassembled EDEK bytes. As a result,...

Linux Distros Unpatched Vulnerability : CVE-2026-7767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain...

PT-2026-115864

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to...

CVE-2026-102981

The open-source project management tool Plane is vulnerable to an unauthenticated workspace invitation token leakage in versions prior to 1.4.0 . The issue exists in the WorkspaceJoinEndpoint , where the WorkSpaceMemberInviteSerializer exposes the secret invitation token directly and via the get_...

CVE-2026-102981 Plane: Unauthenticated Workspace Invitation Token Leakage

Plane is an open-source project management tool. Prior to 1.4.0, self-hosted Plane deployments allow unauthenticated GET requests to api/workspaces/slug/invitations/pk/join/ through WorkspaceJoinEndpoint, whose WorkSpaceMemberInviteSerializer exposes the secret invitation token directly and throu...

CVE-2026-102981 Plane: Unauthenticated Workspace Invitation Token Leakage

Plane is an open-source project management tool. Prior to 1.4.0, self-hosted Plane deployments allow unauthenticated GET requests to api/workspaces/slug/invitations/pk/join/ through WorkspaceJoinEndpoint, whose WorkSpaceMemberInviteSerializer exposes the secret invitation token directly and throu...

UBUNTU-CVE-2026-7767

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to...

CVE-2026-7767: URL Redirection to Untrusted Site

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to...