CVE-2026-113602 json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character

json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by inserting a literal 0x1A character. Attackers can append 0x1A and malformed content to pass JSONValue.parseStrict or isValidJsonStrict validation, creating...

EUVD-2026-105168

json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by inserting a literal 0x1A character. Attackers can append 0x1A and malformed content to pass JSONValue.parseStrict or isValidJsonStrict validation, creating...

CVE-2026-112951 ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid rgb or hsl prefix because its TinyColor validation does not require the entire value to match a color. An authenticated user with edit rights can store...

CVE-2026-112951 ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid rgb or hsl prefix because its TinyColor validation does not require the entire value to match a color. An authenticated user with edit rights can store...

CVE-2026-112951

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid rgb or hsl prefix because its TinyColor validation does not require the entire value to match a color. An authenticated user with edit rights can store...

CVE-2026-112951

The ApostropheCMS Node.js content management system is vulnerable to stored XSS in versions prior to 4.34.0 . The root cause is a validation bypass in the color field, where TinyColor validation fails to require the entire value to match a color. This allows an authenticated user with edit rights...

Mass-Scanner-CVE-2026-2631

⚡ CVE-2026-2631 Async Mass Checker Private async mass-checker for internal WordPress validation 🚨 Warning This tool performs a destructive validation. It sends a POST request to the target endpoint and may changeshopsecret on vulnerable targets. Use it only on systems you own or are explicitly...

cve-2026-75650-magento-validation-lab

CVE-2026-75650 / VULN-39341 Docker validation lab This standalone lab reproduces the complete unauthenticated StyleSmuggler HTTP chain on a revision-pinned Magento Open Source 2.4.9 checkout. It then applies Adobe's VULN-39341 patch and proves that the identical request sequence no longer reaches...

DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002

fofa syntax: title="DataEase" poc: "POST /de2api/datasource/validate HTTP/1.1 Host: your-ip Accept-Encoding: gzip, deflate, br, zstd sec-ch-ua: ""Google Chrome"";v=""135"", ""Not-A.Brand"";v=""8"", ""Chromium"";v=""135"" User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML...

CVE-2026-95109 Cortex-A7 module data validation checks only the first address of a caller-supplied range

The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating one address — the first byte. The common Module Manager hands its range check the module instance, the start address and the complete byte size; the Cortex-A7 implementation discarded the instance and the size and...

CVE-2026-95109

The Cortex-A7 MMU Modules port contains a data validation flaw where it only translates the first byte of a caller-supplied buffer instead of the entire range. While the Module Manager provides the start address and complete byte size, the Cortex-A7 implementation discards the size, allowing memo...

CVE-2024-21534-poc

Vulnerability: CVE-2024-21534 Severity: Critical CVSS Score: 9.8 Description: The jsonpath-plus package versions = 10.0.7 is vulnerable to a Remote Code Execution RCE vulnerability that allows attackers to execute arbitrary code via Node.js's VM module. This vulnerability is caused by insufficien...

EUVD-2026-105035

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argument where the file argument ends in a parent-directory component plus a line-and-column suffix: the path is resolved whil...

CVE-2018-11235

CVE-2018-11235 Vulnerability Overview Vulnerability Name: Git Security Vulnerability CNNVD ID: CNNVD-201805-1020 Severity Level: High CVE ID: CVE-2018-11235 Vulnerability Type: Security Feature Issue Published Date: 2018-05-31 Threat Type: Remote Updated Date: 2019-04-01 Vendor: git-scm...

CVE-2020-0601

ChainOfFools AKA CurveBall AKA CVE-2020-0601 Collection of CVE-2020-0601 ChainOfFools | CurveBall resources General A summary from the NSA advisory states. NSA has discovered a critical vulnerability CVE-2020-0601 affecting Microsoft Windows®1 cryptographic functionality. The certificate validati...

Ivanti-Connect-Around-Scan

Ivanti Connect Around Vulnerability Checker Ivanti Connect Around Vulnerability Checker Overview Features Types of Checks WEB ACCESS SYSTEM INFO BYPASS DETECTED Status Types Explanation Getting Started Requirements Usage Arguments Target Specification Custom Variables Output Stylization To Do...

cve-2026-31900-lab

CVE-2026-31900 — Vulnerable Lab psf/black GitHub Action RCE via Insecure Regex Validation Field| Detail ---|--- CVE| CVE-2026-31900 CVSS| 8.7 High Advisory| GHSA-v53h-f6m7-xcgm Affected| psf/black GitHub Action v26.3.0 Type| RCE via Supply Chain pullrequest trigger Vulnerability The usepyproject:...

halo-2.25.4-CVE-2026-67919

Authenticated Remote Code Execution RCE via Unvalidated Plugin URI Installation in Halo 2.25.4 1. Vulnerability Summary A critical security vulnerability has been identified in Halo version 2.25.4. The application provides an administrative endpoint to install or upgrade plugins from a remote URI...

cve-2026-31431-poc

CVE 2026-31431 POC This exploit takes advantage of a flaw in the length validation of authencesn in Linux, causing dirty pages to be written back to locations the user has no permission to access, resulting in privilege escalation. The attack principle is mainly based on this repo, with some...

CVE-2024-55968

CVE-2024-55968 POC for DTEX LPE CVE-2024-55968 Affected product: DEC-M DTEX Forwarder version 6.1.1. DTEX is a unified insider risk management platform. Affected component: DEC-M EventReportingService XPC Helper Attack vector: The DTEX Event Reporting Service was found with a privileged XPC helpe...