August 2026 (30)
Authorization Bypass Vulnerability in WPAdverts Classifieds Plugin
1 rule 1 TTP 1 CVEThe WPAdverts - Classifieds Plugin for WordPress up to version 2.3.2 is vulnerable to an authorization bypass allowing unauthenticated attackers to exfiltrate internal configuration data via the REST API.
SQL Injection in PHPGurukul Complaint Management System
1 rule 1 TTP 1 CVEPHPGurukul Complaint Management System 1.0 contains an unauthenticated SQL injection vulnerability in the user/check_availability.php file, allowing remote attackers to execute arbitrary database commands.
SQL Injection in SourceCodester Class and Exam Timetabling System
2 rules 1 TTP 1 CVESourceCodester Class and Exam Timetabling System 1.0 contains an unauthenticated SQL injection vulnerability in edit_teacher.php that allows remote attackers to compromise database integrity.
Privilege Escalation in managedcluster-import-controller
1 TTP 1 CVEA privilege escalation vulnerability in the managedcluster-import-controller allows a compromised spoke cluster service account to escalate privileges on the hub cluster by submitting malformed Certificate Signing Requests.
Remote Code Execution in atomic-agents-stack via Insecure MCP Registry
2 TTPsThe atomic-agents-stack library is vulnerable to remote code execution due to insecure handling of cleartext HTTP connections for MCP registry catalogs, allowing a Man-in-the-Middle attacker to inject malicious commands.
Unbounded Gzip Decompression Denial of Service in http4k
1 TTPThe http4k library fails to limit the size of decompressed gzip data, allowing unauthenticated remote attackers to trigger JVM heap exhaustion via small, highly compressed payloads.
Denial of Service in docx4j-core via Cyclic Style Inheritance
1 TTPThe docx4j-core library is vulnerable to a stack exhaustion denial-of-service attack due to missing cycle detection in the OpenXML style resolution process.
Authentication Bypass in http4k-security-digest via Digest URI Replay
The http4k-security-digest library fails to validate the URI parameter in Digest authentication responses, enabling attackers to replay captured authentication credentials against unauthorized endpoints within the same realm.
Unauthenticated SSRF in 9Router OIDC Test Endpoint
1 rule 2 TTPs 1 CVEAn unauthenticated SSRF vulnerability in the 9Router /api/auth/oidc/test endpoint allows remote attackers to perform internal network scanning and data exfiltration via the issuerUrl parameter.
Path Traversal in SWE-agent Trajectory Inspector
1 rule 2 TTPs 1 CVEThe SWE-agent trajectory inspector version 1.1.0 is vulnerable to unauthenticated path traversal via the /trajectory/ handler, allowing attackers to read JSON-formatted sensitive files.
SkyPilot Privilege Escalation Vulnerability (CVE-2026-75481)
1 rule 1 TTP 1 CVESkyPilot versions through 0.13.1rc1 are vulnerable to a privilege escalation flaw allowing authenticated users to elevate service account roles to administrator, resulting in full platform takeover.
Authentication Bypass in JimuReport
1 rule 1 TTP 1 CVEJimuReport versions 2.3.4 and earlier contain an authentication bypass vulnerability allowing unauthenticated actors to enumerate reports and exfiltrate sensitive data via leaked share tokens.
Path Traversal Vulnerability in Evidently UI
1 rule 2 TTPs 1 CVEAn unauthenticated path traversal vulnerability (CVE-2026-75111) in the Evidently UI dataset materialization endpoint allows attackers to read arbitrary files from the host system.
Missing Authorization in Determined API Endpoints (CVE-2026-75109)
1 CVEDetermined AI's Determined platform fails to authorize API requests for generic task management, allowing authenticated attackers to disrupt workloads by terminating or pausing tasks owned by other users.
Authorization Bypass in Crawlab Password Change Endpoint
1 rule 2 TTPs 1 CVEAn authorization bypass vulnerability in Crawlab (CVE-2026-75103) allows authenticated users to reset the passwords of any account, enabling administrator takeover and subsequent arbitrary code execution.
Authorization Bypass in Typemill Media File Download Route
1 rule 1 TTP 1 CVETypemill versions prior to 2.26.0 are susceptible to an authorization bypass vulnerability that allows unauthenticated attackers to download restricted media files via path manipulation.
Authentication Bypass in MemOS via Internal Middleware Misconfiguration
2 TTPs 1 CVEMemOS contains an authentication bypass vulnerability where unset environment variables cause the internal request middleware to fail open, granting unauthenticated remote attackers administrative access.
OpnForm Editable Submission Secret Predictability Vulnerability
2 TTPs 1 CVEOpnForm versions prior to 2.0.2 allow unauthenticated attackers to predict submission secrets, leading to unauthorized access and modification of form data.
SQL Injection in SourceCodester Pet Grooming Management Software
1 rule 1 TTP 1 CVEA publicly exploitable SQL injection vulnerability in SourceCodester Pet Grooming Management Software 1.0 allows remote attackers to compromise the backend database via the /admin/get_barcode_data.php file.
Cross-Site Scripting Vulnerability in Legora via Mermaid Blocks
2 TTPs 1 CVELegora versions prior to 2026-08-14 are vulnerable to cross-site scripting via insecure front-matter parsing in Mermaid diagram blocks, allowing arbitrary JavaScript execution and potential session token theft.
Out-of-Bounds Read in TIER IV Nebula
1 TTP 1 CVETIER IV Nebula through 1.2.0 is vulnerable to an out-of-bounds read in the Vlp32Decoder::unpack function, allowing remote attackers to inject fabricated point cloud data via malformed UDP packets.
Remote Code Execution via Search Custom Resource in Red Hat Advanced Cluster Management
1 TTP 1 CVEAn administrative user on the Red Hat Advanced Cluster Management hub can exploit a flaw in the Collector.ImageOverride field to deploy arbitrary container images and achieve remote code execution across managed clusters.
Privilege Escalation in Red Hat Multicluster Global Hub
1 TTP 1 CVEA critical authorization vulnerability in the multicloud-operators-subscription component allows low-privileged users to escalate privileges and perform unauthorized resource deployment via crafted Subscription annotations.
Stack Buffer Overflow in COVESA Open1722
2 TTPs 1 CVECOVESA Open1722 versions through 0.9.2 are vulnerable to a stack-based buffer overflow in the avtp_to_can function that allows unauthenticated remote attackers to achieve arbitrary code execution via crafted UDP datagrams.
Out-of-Bounds Read in Belledonne Communications bcg729
1 CVEAn out-of-bounds read vulnerability in bcg729 versions up to 1.1.2 allows unauthenticated network-adjacent attackers to cause a process crash or heap memory exposure via malformed RTP payloads.
Stack Buffer Overflow in INDI indiserver
1 TTP 1 CVEAn unauthenticated remote attacker can crash the INDI indiserver daemon via a stack-based buffer overflow triggered by malformed XML input containing excessively long tags.
Stack Exhaustion Vulnerability in deepmerge-ts
The deepmerge-ts library contains a stack exhaustion vulnerability, CVE-2026-40345, that allows attackers to trigger a process crash by providing crafted, self-referencing recursive object graphs to merge functions.
Medplum External Auth Callback Improper Redirect Validation
1 rule 1 TTPAn improper redirect URI validation vulnerability in Medplum allows attackers to steal authorization codes and perform account takeover by prefix-matching registered callback URIs.
Integer Overflow in New-API Billing Settlement
1 rule 3 TTPs 1 CVEA critical integer overflow vulnerability in QuantumNous new-api allows authenticated users to inflate their account balance by injecting extreme quantity multipliers that result in negative settlement charges.
Incomplete Fix for Glances Configuration Command Execution Bypass
2 TTPs 2 CVEsGlances versions up to 4.5.5 contain a vulnerability where the --disable-config-exec flag fails to sanitize shell operators in on-alert action commands, allowing arbitrary command execution or file redirection.