LocalAI - Partial Local File Read

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery SSRF and partial Local File Inclusion LFI. The endpoint supports both https-// and file-// schemes, where the latter can lead to LFI. However, the output is limited due to the...

Vite Dev Server - Information Exposure

Vite is a frontend tooling framework for JavaScript. Before versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network using...

CVE-2020-14882

Oracle WebLogic Unauthenticated RCE Exploit This PowerShell script exploits CVE-2020-14882 to achieve unauthenticated remote code execution on Oracle WebLogic Server versions: 10.3.6.0.0 12.1.3.0.0 12.2.1.3.0 12.2.1.4.0 14.1.1.0.0 Usage root@kitploit: .\exploit.ps1 -target 'https://target:7001'...

node-pdf-generator-ssrf

CVE-2020-7740 This affects all versions of package node-pdf-generator. Due to lack of user input validation and sanitization done to the content given to node-pdf-generator, it is possible for an attacker to craft a url that will be passed to an external server allowing an SSRF attack. Source Qui...

CVE-2021-1675

CVE-2021-1675 CVE-2021-1675: Windows プリンターサービスにおけるゼロデイ脆弱性 - すべてのオペレーティングシステムバージョンでエクスプロイトが利用可能 Microsoft が公式パッチをリリースするまでの間の緩和策として、私が見つけた方法の1つを紹介します。 管理者として Windows PowerShell で実行してください。 注: Servers.txt ドメイン内のすべてのサーバーを含め、プリントサーバーの役割がインストールされているサーバーは除外してください。 $server= Get-Content C:\Script\Servers.t...

ROOT-APP-GOBINARY-CVE-2026-39821 CVE-2026-39821 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-39821 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-25681 CVE-2026-25681 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-25681 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-33814 CVE-2026-33814 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-33814 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42506 CVE-2026-42506 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-42506 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-46595 CVE-2026-46595 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-46595 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39831 CVE-2026-39831 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-39831 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-46598 CVE-2026-46598 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-46598 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-56854 CVE-2026-56854 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-56854 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-46597 CVE-2026-46597 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-46597 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39827 CVE-2026-39827 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-39827 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39832 CVE-2026-39832 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-39832 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39828 CVE-2026-39828 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-39828 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39834 CVE-2026-39834 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-39834 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39835 CVE-2026-39835 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-39835 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39830 CVE-2026-39830 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-39830 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...