87 matches found
CVE-2026-102583
A flaw exists in Moodle due to an incorrect capability check within the artificial intelligence (AI) editor placement's image generation web service. This vulnerability allows an authenticated user to bypass required permissions to invoke the feature, resulting in unauthorized access and usage of...
CVE-2026-34926
⚠️ 安全研究与法律免责声明 📌 本仓库的目的 本仓库严格仅供教育、学术及授权的网络安全研究目的 使用。 其旨在支持理解以下内容： 在受控环境中的安全漏洞与利用概念 沙箱隔离机制及其局限性 安全软件设计与防御性安全实践 🚫 仅限授权使用 本仓库仅可在已获得明确许可的环境中使用，例如： 个人或受控虚拟机 Docker 或隔离实验室环境 授权的渗透测试任务 学术或网络安全培训设置 任何超出授权环境的使用均被严格禁止。 ⚖️ 不承担任何责任 本仓库的作者及贡献者不承担任何责任、义务或法律责任 ，对于因使用、误用或分发本项目或其内容而产生的任何滥用、损害、损失或法律后果概不负责。...
CVE-2026-56681: Reliance on Untrusted Inputs in a Security Decision
9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing custom-server.js wrapper trust the client-supplied X-9r-Real-Ip header in src/dashboardGuard.js when isLocalRequest decides whether canAccessPublicLlmApi may skip...
Exploit for CVE-2026-19478
cve-id Donate Support the maintenance of this project wit...
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the...
ABIS BAPSİS 安全漏洞
ABIS BAPSİS is a research information system developed by the Turkish company ABIS, aimed at university research projects, academic budgets, and administrative processes management. Previous versions of ABIS BAPSİS, such as v.202604152042, contained security vulnerabilities. These vulnerabilities...
CVE-2026-40904 Chartbrew: Incorrect Access Control in dataset and dataRequest routes via team-scoped permission checks
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes multiple dataset and dataRequest endpoints that authorize low-privileged project members at the team level instead of binding the...
Keycloak services allows the issuance of access and refresh tokens for disabled users
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a...
EUVD-2020-28378
Malware in sbrugna...
EUVD-2023-57845
Malicious code in bioql PyPI...
EUVD-2024-50035
Malicious code in bioql PyPI...
Opay Mobile application 安全漏洞
Opay Mobile application is a lightweight application from Opay Inc. It is used to manage all banking or payment requirements. A security vulnerability exists in Opay Mobile application version 2.19.4, which originated from allowing a user to bypass payment authorization by disabling Bluetooth at ...
CVE-2025-46018: Authentication Bypass by Spoofing
CSC Pay Mobile App 2.19.4 fixed in version 2.20.0 contains a vulnerability allowing users to bypass payment authorization by disabling Bluetooth at a specific point during a transaction. This could result in unauthorized use of laundry services and potential financial loss...
Exploit for CVE-2025-2294
CVE-2025-2294 - WordPress Kubio AI Page Builder Request/Res...
Exploit for Path Traversal in Splunk
CVE 2024-36991 - A path-traversal vulnerability that allows an...
Exploit for Improper Access Control in Lerouxyxchire Client_Database_Management_System
CVE-2025-5840 CVE-2025-5840 Exploit In Python By hax / haxerr9...
Exploit for Code Injection in Xwiki
CVE-2025-24893-EXP Affected Versions xwiki-platform = 5.3...
Exploit for SQL Injection in Plechevandrey Wp-Recall
cve-2025-1323 WP-Recall Plugin SQL Injection ⚠️ Legal Dis...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a lack of range checking in bitmapipuadt in the netfilter component, which could lead to unauthorized operatio...