Overzicht van binnengekomen advisories.
2179 resultaten gevonden
A SQL injection vulnerability has been identified in SourceCodester Class and Exam Timetabling System version 1.0. The vulnerability exists in the mysqli_query function within the file /admin/modal_add_course2.php. An attacker can manipulate the 'course' argument to perform SQL injection attacks. The attack can be launched remotely without requiring physical access. A public exploit has been disclosed, making this vulnerability actively exploitable. The affected product is a web-based academic scheduling system. No authentication bypass details are specified, but remote exploitation increases the risk significantly. The vulnerability has been assigned CVE-2026-86222 and is tracked by NVD and VulDB.
Bekijk origineel advisory →A vulnerability has been identified in Mstfakts College-Management-System affecting the login.php file in the Front-end directory. The flaw involves improper authentication through manipulation of the email argument, allowing attackers to bypass authentication remotely. The exploit has been publicly disclosed and is available for use, increasing the risk of active exploitation. The product uses a rolling release model, meaning no specific version details are available for affected or patched releases. The project maintainer was notified via an issue report but has not yet responded. This lack of response and the public availability of the exploit make this a high-risk vulnerability. No patch or workaround has been officially provided at this time.
Bekijk origineel advisory →A critical OS command injection vulnerability has been identified in Tenda HG10 firmware version 300001138. The vulnerability resides in the formgponConf function within the /boaform/admin/formgponConf file of the Boa web server component. An attacker can manipulate the fmgpon_loid argument to inject and execute arbitrary OS commands. The vulnerability is remotely exploitable without physical access to the device. A public exploit is already available, increasing the risk of active exploitation in the wild. The affected device is a home gateway/router product from Tenda, a widely used networking hardware vendor. This type of vulnerability in IoT/networking devices poses significant risks to home and small business networks. Users of the affected firmware version should apply patches or mitigations as soon as they become available.
Bekijk origineel advisory →A SQL injection vulnerability has been identified in SourceCodester Class and Exam Timetabling System version 1.0. The flaw exists in the /delete_teacher.php file, where manipulation of the 'ID' argument allows SQL injection attacks. The vulnerability can be exploited remotely without requiring physical access to the system. A public exploit has already been released, increasing the risk of active exploitation. The affected product is a web-based timetabling application commonly used in educational institutions. Attackers could potentially access, modify, or delete database contents through this vulnerability. The issue has been catalogued in VulDB and reported via GitHub. Users of the affected system are advised to apply patches or mitigations immediately.
Bekijk origineel advisory →A new unpatched zero-day vulnerability dubbed 'StyleSmuggler' has been discovered in Magento Open Source and Adobe Commerce by Dutch e-commerce security company Sansec. The flaw allows attackers to execute malicious code on online store servers without requiring authentication. Active exploitation began on September 4, 2026, with Sansec publishing an early advisory on September 5. The vulnerability poses a critical risk to e-commerce operators using affected platforms, potentially enabling full server compromise and store backdooring. No patch was available at the time of disclosure, making this a high-severity zero-day threat targeting the e-commerce ecosystem.
Bekijk origineel advisory →Unidentified threat actors exploited a recently disclosed critical vulnerability in JetBrains TeamCity to breach JetBrains' own Cadence environment. The attackers successfully extracted AWS credentials during the intrusion. JetBrains has issued an urgent advisory for all Cadence users to immediately revoke or rotate any credentials and secrets used in Cadence executions. The incident highlights the risk of unpatched CI/CD infrastructure, particularly in widely used developer tooling platforms. The breach underscores the supply chain risk posed when development pipeline tools like TeamCity are left unpatched. JetBrains has not publicly identified the threat actors responsible for the attack.
Bekijk origineel advisory →Broadcom has released security updates addressing two vulnerabilities in VMware Workstation and Fusion. The most severe is CVE-2026-59346, an integer-overflow vulnerability with a CVSS score of 9.3. A local attacker with elevated privileges can exploit this flaw to execute arbitrary code on the host system. The vulnerability affects VM administrators, potentially allowing them to break out of the virtual machine and execute code on the underlying host. Broadcom's patches address both flaws, and users are urged to apply updates promptly given the critical severity rating.
Bekijk origineel advisory →A large-scale cybercriminal operation has compromised over 5,400 small-business websites to distribute ClickFix payloads. The payloads are stored in smart contracts on the BNB Smart Chain (BSC), leveraging blockchain infrastructure to evade takedowns. Victims visiting the compromised sites are served malicious content that attempts to trick them into executing commands or downloading malware. The use of blockchain-based smart contracts for payload storage represents an evasion technique making it difficult for defenders to remove malicious content. This campaign highlights the growing abuse of decentralized technologies for malware distribution. The scale of the operation—thousands of hacked sites—indicates a well-resourced and organized threat actor. ClickFix is a social engineering technique that instructs users to manually run malicious commands under the guise of fixing an error or CAPTCHA.
Bekijk origineel advisory →Threat actors are actively exploiting two newly disclosed PaperCut vulnerabilities, CVE-2026-81578 (authentication bypass) and CVE-2026-82078 (remote code execution), in a chained attack targeting educational institutions in the U.S. and Europe. The Arctic Wolf Adversary Research Team observed attackers leveraging this exploit chain to perform command execution, reconnaissance, and credential theft. The education sector appears to be the primary target of this campaign. The attack chain combines an authentication bypass with remote code execution, making it particularly dangerous. Organizations using PaperCut print management software are urged to patch immediately.
Bekijk origineel advisory →Cua computer-server versions before 0.3.42 contain a critical authentication bypass vulnerability triggered when the CONTAINER_NAME environment variable is unset. The server binds to all network interfaces by default, exposing TCP port 8000 to unauthenticated attackers. Exploitation allows arbitrary shell command execution via the run_command endpoint, unrestricted file read/write through file operation endpoints, and access to interactive PTY shells without any credentials. The vulnerability is particularly dangerous due to its default exposure and ease of exploitation. A fix was introduced in version 0.3.42 via commit 59cf25c0ec54. The issue was tracked and reported via GitHub issue #1892. Organizations using affected versions should upgrade immediately to mitigate risk of full system compromise.
Bekijk origineel advisory →Coolify versions through 4.3.17 contain a critical authentication bypass vulnerability in the OAuth callback handler. The flaw allows attackers to sign into existing user accounts by registering the victim's email address on any enabled OAuth provider. The system incorrectly matches accounts based solely on email address without verifying provider assertions or binding OAuth identities. This attack vector effectively bypasses both password requirements and two-factor authentication. Any attacker with knowledge of a target's email address can exploit this to gain full authenticated sessions. The vulnerability exists in the OauthController.php handler and associated routing logic. It represents a complete account takeover risk for all users of affected Coolify deployments with OAuth providers enabled.
Bekijk origineel advisory →Webstudio versions through 0.296.0 contain an unauthenticated server-side request forgery (SSRF) vulnerability affecting the /cgi/image, /cgi/video, and /cgi/asset proxy routes. The vulnerability is triggered when the RESIZE_ORIGIN environment variable is not set, allowing attackers to supply arbitrary URLs to these endpoints without authentication. Exploitation can enable reading of cloud instance metadata, access to internal services, and network reconnaissance of the underlying infrastructure. The affected routes are implemented in the builder application of the Webstudio project. The issue has been documented in GitHub issue #5816 and referenced by VulnCheck. No authentication is required to exploit this vulnerability, significantly increasing its risk profile. Affected organizations running self-hosted Webstudio instances should ensure the RESIZE_ORIGIN environment variable is properly configured or upgrade to a patched version.
Bekijk origineel advisory →A critical OS command injection vulnerability has been identified in Tenda CP3 firmware version 27.5.57.101. The flaw resides in the file Net/NetCheckPing.cpp, where improper handling of the arguments interface_name and host allows an attacker to inject arbitrary OS commands. The vulnerability can be exploited remotely without requiring physical access to the device. Successful exploitation could allow an attacker to execute arbitrary commands on the affected device, potentially leading to full system compromise. The issue is tracked as CVE-2026-86149 and has been assigned a high severity rating. Tenda CP3 is a network camera/IP device, making this vulnerability particularly concerning for IoT and network security environments. No patch details are currently available in the article, and users are advised to monitor vendor advisories from Tenda.
Bekijk origineel advisory →SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can exploit these endpoints without any authentication to connect to internal databases, execute arbitrary SQL commands, enumerate database schemas, and pivot into the server's internal network. The vulnerability affects the API connection endpoints including execute.ts and test.ts. This represents a critical security flaw as it allows complete database access and potential network pivoting with no authentication barrier. The issue has been documented in GitHub issues and confirmed by VulnCheck in their advisories.
Bekijk origineel advisory →Bilibili Desktop through version 1.18.0 contains a critical vulnerability where TLS certificate verification is disabled process-wide, allowing on-path attackers to intercept network traffic. The application also executes unsigned remote JavaScript configuration files without integrity checks, compounding the risk. An attacker positioned on the network path can intercept configuration fetches and inject arbitrary JavaScript into the renderer process. The injected JavaScript has access to a privileged IPC bridge, enabling execution of system commands. Additionally, attackers can leverage this vulnerability to steal user login credentials. The attack requires an on-path network position (e.g., compromised Wi-Fi, ISP-level interception, or ARP spoofing). A proof-of-concept exploit and advisory have been published publicly on GitHub, increasing exploitation risk. The combination of TLS verification bypass and unsigned script execution represents a severe security design flaw.
Bekijk origineel advisory →MindsDB versions through 26.1.0 contain a server-side request forgery (SSRF) vulnerability in the web crawler handler. Unauthenticated attackers can supply arbitrary URLs to the CrawlerTable.list function to fetch internal resources. The vulnerability stems from a default empty allowlist configuration that fails to restrict outbound requests. Attackers can exploit this to access internal services, cloud metadata endpoints, and other sensitive infrastructure without any authentication. The flaw is located in the web_handler.py integration handler and the config.py utility. This poses significant risk in cloud-hosted MindsDB deployments where metadata services like AWS IMDSv1 may be accessible. A GitHub issue and external advisory from VulnCheck have been published documenting the vulnerability.
Bekijk origineel advisory →Axolotl versions through 0.18.0 contain a critical remote code execution vulnerability in the multipack patch path. The vulnerability arises because the trust_remote_code parameter defaults to None instead of False, allowing the security guard to be bypassed. During the multipack patching process, AutoModelForCausalLM.from_pretrained is called with a hardcoded trust_remote_code=True, enabling arbitrary Python code execution. An attacker can exploit this by crafting a malicious Hugging Face model repository and designating it as the base_model in an Axolotl configuration. This effectively allows remote attackers to execute arbitrary code on systems using Axolotl for model fine-tuning. A fix has been committed and a pull request addressing the issue is available in the official repository.
Bekijk origineel advisory →A critical security vulnerability has been identified in Tenda CP3 firmware version 27.5.57.101. The flaw resides in the SystemAsh function within the file Apis/system.c, part of the Kylin component. By manipulating the AlarmVoiceURL argument, an attacker can perform OS command injection. The vulnerability is remotely exploitable, requiring no physical access to the target device. This type of vulnerability poses a significant risk as it can allow attackers to execute arbitrary system commands. Successful exploitation could lead to full device compromise, data exfiltration, or use of the device in further attacks. The vulnerability has been assigned CVE-2026-86148 and is catalogued in both NVD and VulDB databases. Tenda CP3 is a network-connected security camera device, making this vulnerability particularly concerning for IoT and surveillance infrastructure deployments.
Bekijk origineel advisory →WWBN AVideo contains a critical path traversal vulnerability in the notify.ffmpeg.json.php script. Unauthenticated attackers can exploit the avideoRelativePath parameter to write files to arbitrary locations on the server. The vulnerability is compounded by a broken authentication mechanism where any previously issued ciphertext can be replayed as a notifyCode token. The token is decrypted but never validated, effectively allowing full authentication bypass. This enables attackers to write malicious files to the application root and its subdirectories. The combination of path traversal and authentication bypass makes this a high-severity issue. Successful exploitation could lead to remote code execution by writing web shells or overwriting critical application files. No authentication is required, significantly lowering the barrier for exploitation.
Bekijk origineel advisory →CVE-2026-52769 affects YesWiki, a PHP-based wiki system, in versions 4.6.2 through 4.6.5. The vulnerability exists in the publicly accessible POST /api/forms/{formId}/actor/inbox route, which accepts HTTP Signature headers. The HttpSignatureService::verifySignature() method blindly performs a server-side HTTP GET request to the URL specified in the keyId parameter without any prior cryptographic verification or URL validation. This allows unauthenticated attackers to exploit the server as a proxy to reach internal services, cloud metadata endpoints such as 169.254.169.254, and intranet-only admin panels. Attackers can leverage timing and error-message oracles to perform port scanning and service enumeration, and on cloud instances, access IAM metadata. The vulnerability is exploitable when ActivityPub is enabled on at least one Bazar form. A patch has been released in version 4.6.6.
Bekijk origineel advisory →