105855 matches found
CVE-2026-104969
Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request body without validating that they belong to the caller's workspace. An authenticated user can add issues from any workspace to a cycle they control. If a victim issue is...
Security Bulletin: IBM Event Endpoint Management is affected by a vulnerability in the uuid package
Summary IBM Event Endpoint Management is affected by a vulnerability in the uuid package that may allow out-of-range writes to caller-provided buffers when generating certain UUID versions. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC412...
CVE-2026-104969
Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request body without validating that they belong to the caller's workspace. An authenticated user can add issues from any workspace to a cycle they control. If a victim issue is...
CVE-2026-104969 Plane: Cross-Tenant Cycle Issue Hijack via IDOR
Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request body without validating that they belong to the caller's workspace. An authenticated user can add issues from any workspace to a cycle they control. If a victim issue is...
CVE-2026-104969
The open-source project management tool Plane is vulnerable to a cross-tenant cycle issue via IDOR in versions prior to 1.4.0 . The cycle-issues endpoint fails to validate that provided issue UUIDs belong to the caller's workspace, allowing an authenticated user to move issues from any workspace ...
EUVD-2026-92491
Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request body without validating that they belong to the caller's workspace. An authenticated user can add issues from any workspace to a cycle they control. If a victim issue is...
CVE-2026-104969 Plane: Cross-Tenant Cycle Issue Hijack via IDOR
Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request body without validating that they belong to the caller's workspace. An authenticated user can add issues from any workspace to a cycle they control. If a victim issue is...
CVE-2026-104969 Plane: Cross-Tenant Cycle Issue Hijack via IDOR
Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request body without validating that they belong to the caller's workspace. An authenticated user can add issues from any workspace to a cycle they control. If a victim issue is...
Path Traversal
Apache Kyuubi is vulnerable to Path Traversal. The vulnerability is due to the use of the client‑supplied multipart filename when creating a temporary uploaded resource, where the filename is not validated and path traversal sequences such as ../ can be included, allowing a remote attacker to wri...
SUSE CVE-2026-104843
uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user's PATH. Non-Windows...
CVE-2026-12171
auto-changelog before 2.6.1 merges configuration from inside the target repository the .auto-changelog file and the auto-changelog key in package.json into its options, and honors security-sensitive options from that untrusted source. The handlebarsSetup option is passed to require, so running...
EUVD-2026-92475
auto-changelog before 2.6.1 merges configuration from inside the target repository the .auto-changelog file and the auto-changelog key in package.json into its options, and honors security-sensitive options from that untrusted source. The handlebarsSetup option is passed to require, so running...
K000163547: Linux kernel vulnerability CVE-2026-45991
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated partition descriptors can trigger a heap out-of-bounds write in partdescsloc. handlepartitiondescriptor...
FortiMail CVE-2026-102490 Detection
Detects FortiMail instances vulnerable to CVE-2026-102490 unauthenticated path traversal allowing arbitrary file write via crafted HTTP requests. !/usr/bin/env python3 -- coding: utf-8 -- """Detect FortiMail path traversal CVE-2026-102490.""" from kittysploit import from...
Exchange ProxyShell RCE (CVE-2021-34473)
Exploits the ProxyShell chain on Microsoft Exchange: SSRF via Autodiscover CVE-2021-34473, elevation to SYSTEM mailbox CVE-2021-34523, and arbitrary file write CVE-2021-31207 to drop an ASPX webshell and execute a reverse CMD payload. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Exchang...
Exploit for CVE-2026-105314
Papermerge-core: Authenticated Path Traversal to Arbitrary Fil...
Exploit for Out-of-bounds Write in Apple Ipados
🛡️ CVE-2026-86950 — CoreGraphics Security Research...
kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors
A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...
DEBIAN-CVE-2026-63266
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...
CVE-2026-63266
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...