CVE-2026-20896

Proof of Concept Code CVE-2026-20896 This script automates the exploitation of the logic flaw in Gitea's API route validation, allowing to force the server to grant a valid administrative token through a Directory Traversal attack in the authorization header. !/usr/bin/env python3 PoC: Gitea...

CVE-2026-113602

json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by inserting a literal 0x1A character. Attackers can append 0x1A and malformed content to pass JSONValue.parseStrict or isValidJsonStrict validation, creating...

CVE-2026-112951

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid rgb or hsl prefix because its TinyColor validation does not require the entire value to match a color. An authenticated user with edit rights can store...

CVE-2022-24087

CVE-2022-24087-RCE and CVE-2022-24086-RCE CVE description CVE-2022-24086 and CVE-2022-24087 - improper Input Validation vulnerability in contact form Magento Open Source and Adobe Commerce - has received a CVSS score of 9.8 out of 10, it is classified as a pre-authentication issue which means tha...

CVE-2026-113602 json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character

json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by inserting a literal 0x1A character. Attackers can append 0x1A and malformed content to pass JSONValue.parseStrict or isValidJsonStrict validation, creating...

EUVD-2026-105168

json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by inserting a literal 0x1A character. Attackers can append 0x1A and malformed content to pass JSONValue.parseStrict or isValidJsonStrict validation, creating...

CVE-2026-113602 json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character

json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by inserting a literal 0x1A character. Attackers can append 0x1A and malformed content to pass JSONValue.parseStrict or isValidJsonStrict validation, creating...

CVE-2026-113602

The json-smart library, in versions through 2.6.0 , is vulnerable to an input validation bypass (CWE-147). By inserting a literal 0x1A character , an attacker can evade strict-mode trailing-data checks . This allows the inclusion of malformed content that successfully passes JSONValue.parseStrict...

CVE-2026-112951 ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid rgb or hsl prefix because its TinyColor validation does not require the entire value to match a color. An authenticated user with edit rights can store...

CVE-2026-112951 ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid rgb or hsl prefix because its TinyColor validation does not require the entire value to match a color. An authenticated user with edit rights can store...

CVE-2026-112951

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid rgb or hsl prefix because its TinyColor validation does not require the entire value to match a color. An authenticated user with edit rights can store...

CVE-2026-112951

The ApostropheCMS Node.js content management system is vulnerable to stored XSS in versions prior to 4.34.0 . The root cause is a validation bypass in the color field, where TinyColor validation fails to require the entire value to match a color. This allows an authenticated user with edit rights...

Mass-Scanner-CVE-2026-2631

⚡ CVE-2026-2631 Async Mass Checker Private async mass-checker for internal WordPress validation 🚨 Warning This tool performs a destructive validation. It sends a POST request to the target endpoint and may changeshopsecret on vulnerable targets. Use it only on systems you own or are explicitly...

DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002

fofa syntax: title="DataEase" poc: "POST /de2api/datasource/validate HTTP/1.1 Host: your-ip Accept-Encoding: gzip, deflate, br, zstd sec-ch-ua: ""Google Chrome"";v=""135"", ""Not-A.Brand"";v=""8"", ""Chromium"";v=""135"" User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML...

CVE-2026-95109 Cortex-A7 module data validation checks only the first address of a caller-supplied range

The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating one address — the first byte. The common Module Manager hands its range check the module instance, the start address and the complete byte size; the Cortex-A7 implementation discarded the instance and the size and...

CVE-2026-95109

The Cortex-A7 MMU Modules port contains a data validation flaw where it only translates the first byte of a caller-supplied buffer instead of the entire range. While the Module Manager provides the start address and complete byte size, the Cortex-A7 implementation discards the size, allowing memo...

CVE-2024-21534-poc

Vulnerability: CVE-2024-21534 Severity: Critical CVSS Score: 9.8 Description: The jsonpath-plus package versions = 10.0.7 is vulnerable to a Remote Code Execution RCE vulnerability that allows attackers to execute arbitrary code via Node.js's VM module. This vulnerability is caused by insufficien...

EUVD-2026-105035

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argument where the file argument ends in a parent-directory component plus a line-and-column suffix: the path is resolved whil...

CVE-2018-11235

CVE-2018-11235 Vulnerability Overview Vulnerability Name: Git Security Vulnerability CNNVD ID: CNNVD-201805-1020 Severity Level: High CVE ID: CVE-2018-11235 Vulnerability Type: Security Feature Issue Published Date: 2018-05-31 Threat Type: Remote Updated Date: 2019-04-01 Vendor: git-scm...

CVE-2020-0601

ChainOfFools AKA CurveBall AKA CVE-2020-0601 Collection of CVE-2020-0601 ChainOfFools | CurveBall resources General A summary from the NSA advisory states. NSA has discovered a critical vulnerability CVE-2020-0601 affecting Microsoft Windows®1 cryptographic functionality. The certificate validati...