Exploit for CVE-2026-15748

CVE-2026-15748 — Forminator Forms Unauthenticated RCE Unaut...

CVE-2026-19935

The Bluetooth LE host queues received L2CAP connection-oriented channel CoC data for deferred processing through a struct kwork embedded in the channel object lechan-rxwork, handler l2caprxprocess whenever the channel uses a dynamic PSM 0x0080-0x00FF. Channel teardown in l2capchandestroy in...

EUVD-2026-97106

The Bluetooth LE host queues received L2CAP connection-oriented channel CoC data for deferred processing through a struct kwork embedded in the channel object lechan-rxwork, handler l2caprxprocess whenever the channel uses a dynamic PSM 0x0080-0x00FF. Channel teardown in l2capchandestroy in...

CVE-2026-19935 Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown

The Bluetooth LE host queues received L2CAP connection-oriented channel CoC data for deferred processing through a struct kwork embedded in the channel object lechan-rxwork, handler l2caprxprocess whenever the channel uses a dynamic PSM 0x0080-0x00FF. Channel teardown in l2capchandestroy in...

CVE-2026-19935

The Zephyr Bluetooth host is vulnerable to a use-after-free flaw in the L2CAP connection-oriented channel (CoC) object. When using a dynamic PSM (0x0080-0x00FF), the system queues received data for deferred processing via a k_work item. However, during channel teardown in l2cap_chan_destroy(), th...

CVE-2026-108873

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify any department by calling PUT /sys/user/doUpdateDepartInfo. Attackers can supply a department id to rename or re-parent it and replace or remove its department heads...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2026-22740 DESCRIPTION: A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files ma...

CVE-2026-108873 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify any department by calling PUT /sys/user/doUpdateDepartInfo. Attackers can supply a department id to rename or re-parent it and replace or remove its department heads...

EUVD-2026-97047

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify any department by calling PUT /sys/user/doUpdateDepartInfo. Attackers can supply a department id to rename or re-parent it and replace or remove its department heads...

CVE-2026-108873

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw (CWE-862) in the /sys/user/doUpdateDepartInfo endpoint. This vulnerability allows low-privileged authenticated users to modify any department by performing a PUT request. Specifically, an attacker can provide a depart...

CVE-2026-108741

Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...

CVE-2026-108741

The Shepherd (shepherd-ai) software, version 0.3.1 and below, is vulnerable to a Server-Side Request Forgery (SSRF) via DNS Rebinding in the citation-checker extra. The root cause is a Time-of-check Time-of-use (TOCTOU) race condition where the public_url guard validates a resolved address, but t...

CVE-2026-108741 Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker

Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...

EUVD-2026-96907

Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...

rdap

OpenRDAP é uma implementação de cliente RDAP de linha de comando em Go. https://www.openrdap.org - página inicial https://www.openrdap.org/demo - demonstração ao vivo Funcionalidades Cliente RDAP de linha de comando Formatos de saída: texto, JSON, estilo WHOIS Tipos de consulta suportados: ip...

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...

phantom-frida

phantom-frida phantom-frida costruisce Android Frida Server e Gadget dal codice sorgente modificando un insieme mirato di identificatori runtime osservabili. È un builder e un harness di verifica, non una garanzia che ogni metodo di rilevamento specifico dell'applicazione venga sconfitto...

pax

pax Exploit padding oracles for fun and profit! Pax PAdding oracle eXploiter is a tool for exploiting padding oracles in order to: 1. Obtain plaintext for a given piece of CBC encrypted data. 2. Obtain encrypted bytes for a given piece of plaintext, using the unknown encryption algorithm used by...

CVE-2019-0708-poc

CVE-2019-0708 Un grande saluto al Re del doxing Krebs e anche al ladro di invenzioni e truffatore a tutto tondo, Kevin. https://www.youtube.com/watch?v=dQw4w9WgXcQ...

ZEROScan

ZEROScan Einführung ZEROScan ist ein Multi-Thread-Schwachstellenerkennungs-Framework. Damit können Sie Schwachstellenerkennungs-Plugins leicht erhalten oder entwickeln, um Penetrationstests gegen Ziele durchzuführen. Die Benutzeroberfläche und die Verwendung orientieren sich am...