skillscript

Safe, reusable automation authored by agents. skillscript.ai • docs TL;DR — npm install -g skillscript-runtime && skillfile init && skillfile dashboard. See Quickstart. What is Skillscript? Skillscript came from asking: what would a Makefile look like if it built skills instead of binaries? The...

netfence

Netfence Like Envoy xDS, but for eBPF filters. Netfence runs as a daemon on your VM/container hosts and automatically injects eBPF filter programs into cgroups and network interfaces, with a built-in DNS server that resolves allowed domains and populates the IP allowlist. Netfence daemons can be...

CVE-2026-27876

CVE-2026-27876: Grafana SQL Expressions Arbitrary File Write to RCE CVSS 9.1 Critical | Arbitrary File Write | Remote Code Execution Demo https://github.com/user-attachments/assets/c84a4b63-7928-4dba-a069-3bafa036ce56 Summary Grafana's SQL Expressions feature sqlExpressions toggle uses an...

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

sanitize

Sanitize Sanitize is an allowlist-based HTML and CSS sanitizer. It removes all HTML and/or CSS from a string except the elements, attributes, and properties you choose to allow. Using a simple configuration syntax, you can tell Sanitize to allow certain HTML elements, certain attributes within...

sudowp-postgallery

SudoWP PostGallery Security Fork Contributors: SudoWP, WP Republic Original Authors: RTO GmbH Tags: gallery, security, patched, cve-2025-13543 Requires at least: 5.8 Tested up to: 6.7 Stable tag: 1.12.6 License: GPLv2 or later Security Notice This is a security-hardened fork of the abandoned...

CVE-2026-55584

CVE-2026-55584 - phpSysInfo IP Allowlist Bypass CWE-290, CVSS 7.5 High, phpSysInfo = 3.4.5 Refs: GHSA-786w-p5pm-cvgh, CVE.org PSIALLOWED resolves the client IP from the attacker-controlled X-Forwarded-For then Client-IP headers before falling back to REMOTEADDR. There is no trusted-proxy concept,...

mcp-stdio-shellguard

Part of theStudioMeyer MCP Stack — Built in Mallorca 🌴 · ⭐ if you use it mcp-stdio-shellguard Defense-in-depth bundle for MCP stdio servers. Wraps childprocess.exec/spawn with allowlist + sandbox + replay-detection, plus an AST audit CLI mcp-shellguard-audit that scans MCP server sources for...

log4j-4255

log4j2 4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject A self-contained, containerised lab that reproduces Apache log4j2 issue4255 end-to-end against the official Log4j 2.26.1 artifacts on JDK 17 , with positive controls, a hardened oracle, and a validated...

CVE-2026-118425

A flaw exists in the secure-redirect-uris-enforcer client policy of Keycloak , an identity and access management solution. The vulnerability arises when the policy is configured to allow loopback addresses because Keycloak performs DNS resolution during hostname validation. An attacker can bypass...

EUVD-2026-112916

A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and access management solution. The issue occurs when the policy is configured to allow loopback addresses, as Keycloak resolves hostnames via DNS during validation. An attacker can bypass domain allowlis...

CVE-2026-118425

A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and access management solution. The issue occurs when the policy is configured to allow loopback addresses, as Keycloak resolves hostnames via DNS during validation. An attacker can bypass domain allowlis...

CVE-2026-117570

Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scanvulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script,...

CVE-2026-117559

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $... or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.runshell or...

CVE-2026-117570 nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities

Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scanvulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script,...

CVE-2026-117570 nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities

Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scanvulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script,...

EUVD-2026-110848

Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scanvulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script,...

CVE-2026-117570

The Vorota-ai nmap-mcp tool (through commit 3636afa) contains an improper allowlist validation vulnerability in the scan_vulnerabilities tool. This flaw allows callers, such as MCP clients or prompt-injected agents, to bypass restrictions and run blocked NSE script categories. Specifically, attac...

CVE-2026-117559 DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $... or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.runshell or...

EUVD-2026-110837

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $... or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.runshell or...