CVE-2022-36532

إثبات المفهوم لـ CVE-2022-36532 توجد ثغرة أمنية في Bolt CMS الإصدار 5.1.12 فما دونه تتيح لمستخدم موثّق يمتلك دور EDITORROLE تنفيذ تعليمات برمجية عن بُعد. يمكن اكتشاف هذه الثغرة باستخدام هذا السكربت، ولمزيد من التفاصيل حول الثغرة راجع https://lutrasecurity.com/en/articles/cve-2022-36532/. الاستخدا...

Bolt

Bolt Ein einfacher CSRF-Scanner Wichtig Bolt befindet sich in der Beta-Phase der Entwicklung, was bedeutet, dass es Fehler geben kann. Eine produktive Nutzung dieses Tools wird nicht empfohlen. Pull-Requests und Issues sind willkommen. Ich empfehle dir außerdem, dieses Repository zu beobachten,...

CVE-2026-1337

CVE-2026-1337 - Neo4j - Iniezione nei log L'iniezione nei log da parte di un utente autenticato è possibile nel query.log di Neo4j quando Neo4j non è configurato per essere in formato json. Riepilogo Neo4j non effettua l'escape dei caratteri di controllo nel campo metadata di una transazione bolt...

Bolt-CMS-3.6.2---Cross-Site-Scripting

Bolt CMS 3.6.2 - Vulnerabilità Cross-Site Scripting Bolt CMS 3.6.2 - Vulnerabilità Cross-Site Scripting CVE-2018-19933 https://vulners.com/cve/CVE-2018-19933 Prova di concetto Per sfruttare la vulnerabilità, Bolt CMS 3.6.2 consente XSS tramite l'input di testo facendo clic sul pulsante di...

CVE-2019-1759-csrf-js-rce

CVE-2019-1759 Bolt-cms 3.6.10 Csrf - xss - rce...

CVE-2025-25599

CVE-2025-25599 विवरण Bolt एक ओपन-सोर्स सामग्री प्रबंधन प्रणाली है जो Symfony PHP फ्रेमवर्क का उपयोग करके बनाई गई है। एक छोटे सुरक्षा मूल्यांकन के दौरान, Certitude ने कई कमजोरियों की पहचान की, जिसमें मनमाना फ़ाइल पढ़ना शामिल है। जिन उपयोगकर्ताओं के पास EDITOR , CHIEFEDITOR , ADMIN , या DEVELOPER...

RCE-Exploit-Bolt-3.7.0-CVE-2020-4040-4041

इस रिपॉजिटरी में README नहीं है।...

remediate_cesa_2019_2091

cesa20192091 यह मॉड्यूल एक Bolt Task शामिल करता है जो CESA-2019:2091 में वर्णित CVE और अन्य Enterprise Linux 7 EL7 प्लेटफार्मों पर मौजूद समानांतर समस्याओं का समाधान करेगा। विषय-सूची 1. विवरण 2. सेटअप - cesa20192091 के साथ शुरुआत करने की मूल बातें cesa20192091 के साथ शुरुआत करना 3. उपयोग -...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

slater

Slater Versione attuale:v0.25.2 — tutte le release. In una riga: Slater serve grafi che non stanno in memoria — centinaia di milioni di nodi e miliardi di relazioni in poche centinaia di MB di RAM — tramite il Bolt standard, quindi qualsiasi driver neo4j funziona senza modifiche, con la ricerca...

Linux Distros Unpatched Vulnerability : CVE-2026-14587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a...

CVE-2026-14587

Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol version followed by 32 continuation bytes in the capability mask, the decoder resets the reader index and waits for mo...

CVE-2026-14587

Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol version followed by 32 continuation bytes in the capability mask, the decoder resets the reader index and waits for mo...

UBUNTU-CVE-2026-14587

Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol version followed by 32 continuation bytes in the capability mask, the decoder resets the reader index and waits for mo...

EUVD-2026-53446

Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol version followed by 32 continuation bytes in the capability mask, the decoder resets the reader index and waits for mo...

CVE-2026-14587

Neo4j Bolt handshake decoder mishandles an overlong capability bitmask: when an unauthenticated client sends a protocol version followed by 32 continuation bytes, the decoder resets its reader index and waits for more data instead of rejecting the message and closing the channel, leaving the conn...

CVE-2026-14587 Unathenticated connection can hold Bolt channel open

Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol version followed by 32 continuation bytes in the capability mask, the decoder resets the reader index and waits for mo...

CVE-2026-71291

Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field definition's allowtwig flag and a regex...

CVE-2026-71291

Bolt CMS is affected by a server-side template injection: content fields rendered by Twig are not sandboxed. In Field.php, getTwigValue() renders raw values when shouldBeRenderedAsTwig passes checks (field allow_twig flag and a {{, {%, or # regex), using Twig without sandboxing via createTemplate...

CVE-2026-71291 Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering

Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field definition's allowtwig flag and a regex...