EUVD-2026-93510

@payloadcms/plugin-multi-tenant has a cross-tenant create issue...

Ghost: Stored XSS via Bookmark Card Images

Impact When creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's domain, possibly resulting in compromise of other staff users' admin...

CVE-2025-50565

CVE-2025-50565 विवरण Doubo ERP 1.0 में SQL इंजेक्शन भेद्यता है, जो उपयोगकर्ता इनपुट की फ़िल्टरिंग की कमी के कारण है, जिसे एक हमलावर द्वारा दूरस्थ रूप से शुरू किया जा सकता है। भेद्यता प्रकार SQL इंजेक्शन हमले का प्रकार दूरस्थ प्रभाव सूचना प्रकटीकरण true क्या विक्रेता ने पुष्टि की है true खोजकर्ता...

Backstage has improper authorization in GitLab organizational user ingestion

Impact Deployments that enable GitLab organization event ingestion and rely on scoped catalog users as an access boundary may admit an unintended catalog identity. Depending on sign-in and permission configuration, this may allow unauthorized access with the permissions of a standard authenticate...

GHSA-GP6M-X9VW-5C5X Backstage has improper authorization in GitLab organizational user ingestion

Impact Deployments that enable GitLab organization event ingestion and rely on scoped catalog users as an access boundary may admit an unintended catalog identity. Depending on sign-in and permission configuration, this may allow unauthorized access with the permissions of a standard authenticate...

CVE-2026-93524

A flaw was found in xorg-x11-server. An authenticated local user can trigger an out-of-bounds heap memory read by sending specially crafted X Keyboard Extension XKB requests with inconsistent key range parameters. This flaw leads to information disclosure, allowing the user to read sensitive data...

CVE-2026-76437

A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of...

CVE-2026-20321

A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...

CVE-2024-45337

CVE-2024-45337 के लिए अवधारणा प्रमाण शोषण === यह रिपॉजिटरी CVE-2024-45337 के लिए एक अवधारणा प्रमाण शोषण शामिल करता है। इसका उपयोग SSH सर्वर के साथ इंटरैक्ट करते समय ssh को लपेटने के लिए किया जा सकता है जो golang.org/x/crypto = v0.30.0 का उपयोग करके कार्यान्वित किया गया है, जबकि...

DRUPAL-CONTRIB-2026-217

Advanced File System turns Drupal's file storage into a manageable, observable and maintainable subsystem. The Advanced Filesystem: Backup submodule does not sufficiently validate certain requests. This may allow an attacker to trick an authenticated user into performing unintended actions throug...

Exploit for CVE-2026-96451

CVE-2026-96451 WordPress Ultimate Member plugin = 2.13.1 -...

Exploit for Insecure Default Initialization of Resource in Raspberrypi Raspberry_Pi_Os_Lite

CVE-2021-38759 — Raspberry Pi OS Default Credentials Exploit...

EUVD-2026-93515

Payload: Field-level write access bypass in Payload on MongoDB...

qemu

QEMU README QEMU एक सामान्य और ओपन सोर्स मशीन और यूज़रस्पेस एमुलेटर और वर्चुअलाइज़र है। QEMU हार्डवेयर वर्चुअलाइज़ेशन समर्थन की किसी भी आवश्यकता के बिना सॉफ्टवेयर में एक पूर्ण मशीन का अनुकरण करने में सक्षम है। डायनेमिक ट्रांसलेशन का उपयोग करके, यह बहुत अच्छा प्रदर्शन प्राप्त करता है। QEMU एमुलेटे...

ish

iSH iOS पर Linux शेल चलाने का एक प्रोजेक्ट, जो यूज़रमोड x86 एमुलेशन और सिस्कॉल अनुवाद का उपयोग करता है। प्रोजेक्ट की वर्तमान स्थिति के लिए, issues टैब और कमिट लॉग देखें। App Store पेज TestFlight बीटा डिस्कॉर्ड सर्वर सहायता और ट्यूटोरियल के साथ विकी README中文 如若未能保持最新，请提交PR以更新 हैकिंग इस प्रोजेक्ट म...

Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

Summary One unauthenticated request with a crafted User-Agent stalls a Quasar SSR server for seconds. Quasar auto-installs its Platform plugin on every server-side render, and Platform.parseSSR feeds the raw, unbounded User-Agent request header into a chain of backtracking regular expressions in...

EUVD-2026-93569

Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server...

GHSA-68JQ-FHCH-4XQ4 Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

Summary One unauthenticated request with a crafted User-Agent stalls a Quasar SSR server for seconds. Quasar auto-installs its Platform plugin on every server-side render, and Platform.parseSSR feeds the raw, unbounded User-Agent request header into a chain of backtracking regular expressions in...

NPM: Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

NPM: Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server vulnerability discovered by ? in WordPress Npm quasar versions = 2.23.2...

CVE-2026-76437 Cisco Smart Software Manager On-Prem Command Injection Vulnerability

A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of...