tag
Data-Exfiltration
WordPress "Form Maker" Plugin Unauthenticated SQL Injection — CVE-2026-3359
The WordPress "Form Maker" plugin (up to version 1.15.42) passes attacker-controlled input from a crafted inputs[2|typecheckbox|all] field on the admin-ajax.php?action=fmreloadinput endpoint into a SQL query without adequate sanitization, allowing…
Sliver C2 MCP Server Unauthenticated CORS/Preflight Bypass (CVE-2026-34227)
Sliver's MCP server exposes an unauthenticated Server-Sent Events (SSE) interface on 127.0.0.1:8080 and responds to every request with Access-Control-Allow-Origin: . Because the underlying mcp-go library does not validate the request's Content-Type, a…
pdfmake Server-Side Request Forgery via Unvalidated Document URLs (CVE-2026-26801)
CVE-2026-26801 is a Server-Side Request Forgery vulnerability in pdfmake, a popular Node.js PDF generation library. When a document definition (docDefinition) references remote resources in fields such as images, attachments, or files, pdfmake's…
adx-mcp-server KQL Injection via table_name Parameter (CVE-2026-33980)
adx-mcp-server is a Model Context Protocol server that exposes tools letting an AI agent query an Azure Data Explorer (Kusto/KQL) cluster. Three "safe" metadata tools — gettableschema, sampletabledata, and gettabledetails — build their KQL queries by directly…
Drupal Core PostgreSQL SQL Injection (CVE-2026-9082)
CVE-2026-9082 is an unauthenticated SQL injection in Drupal Core's PostgreSQL entity-query handling for JSON:API filters. User-controlled array keys are used to build SQL placeholder names without proper sanitization, enabling injection into generated SQL. On…