jinjava-cve-2026-25526-poc

ステップバイステップのエクスプロイト（全9ステップ）： mvn exec:java -Dexec.mainClass=ExploitHarness -q 2. 最終エクスプロイトチェーン（ファイル作成、ファイル読み取り、情報漏洩）： mvn exec:java -Dexec.mainClass=ExploitFinal -q 3. ファイル内容の外部送信（/etc/passwd、/etc/hosts を読み取る）： mvn exec:java -Dexec.mainClass=ExploitFileRead -q 4. パッチ検証（pom.xml のバージョンを 2.8.3...

CLEANSTART-2026-OB13434 Security fixes in wso2is 7.3.0-r1

Package wso2is version 7.3.0-r1 fixes 11 vulnerabilities: CVE-2025-59340, CVE-2026-25526, CVE-2025-8671, CVE-2026-54399, CVE-2026-54428...

CLEANSTART-2026-TS30875 Security fixes in wso2is 7.2.0-r0

Package wso2is version 7.2.0-r0 fixes 11 vulnerabilities: CVE-2025-59340, CVE-2026-25526, CVE-2025-8671, CVE-2026-54399, CVE-2026-54428...

CVE-2019-25526

creationtimestamp| type| source ---|---|--- 2026-03-12 17:19:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguvtlh5jz2z 2026-03-19 17:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhgj5whzdf2h...

CVE-2019-25526

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the location parameter. Attackers can send POST requests to the search/searchdetailed endpoint with malicious SQL payloa...

CVE-2019-25526 Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the location parameter. Attackers can send POST requests to the search/searchdetailed endpoint with malicious SQL payloa...

CVE-2026-25526

creationtimestamp| type| source ---|---|--- 2026-02-05 00:04:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me33olrviw2x 2026-02-09 04:13:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3meflhngxtr2m 2026-02-09 23:31:52+00:00| seen|...

JinJava Bypass through ForTag leads to Arbitrary Java Execution

Impact Vulnerability Type: Sandbox Bypass / Remote Code Execution Affected Component: Jinjava Affected Users: - Organizations using HubSpot's Jinjava template rendering engine for user-provided template content - Any system that renders untrusted Jinja templates using HubSpot's Jinjava...

CVE-2021-25526

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action...

CVE-2025-25526

Buffer overflow vulnerability in Mercury MIPC552W Camera v1.0 due to the lack of length verification, which is related to the configuration of the PPTP server. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

CVE-2025-25526

Buffer overflow vulnerability in Mercury MIPC552W Camera v1.0 due to the lack of length verification, which is related to the configuration of the PPTP server. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

CVE-2024-25526

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the projectid parameter at /ProjectManage/pmgattinc.aspx...

CVE-2023-25526

creationtimestamp| type| source ---|---|--- 2023-09-20 16:25:39+00:00| seen| https://t.me/cibsecurity/70762...

CVE-2023-25526

Summary of CVE-2023-25526 (NVIDIA Cumulus Linux). The vulnerability exists in the neighmgrd and nlmanager components of NVIDIA Cumulus Linux, where an attacker on an adjacent network can inject a crafted packet to trigger an uncaught exception, potentially causing a denial of service. Affected pr...

Security Bulletin: NVIDIA Cumulus Linux - September 2023

NVIDIA has released a software update for NVIDIA Cumulus Linux. This update addresses security issues that may lead to information disclosure and denial of service. To protect your system, download and install the latest version of NVIDIA Cumulus Linux from the NVIDIA Enterprise Support Portal. G...

CVE-2021-25526

CVE-2021-25526 describes an intent redirection vulnerability in Samsung Blockchain Wallet versions prior to 1.3.02.8. The issue, affecting the wallet component, allows an attacker to cause privileged actions to be executed via faulty redirection. Technical details consistently point to Samsung’s ...