CVE-2021-39174-PoC

CVE-2021-39174-PoC Cachet配置泄露转储工具。CVE-2021-39174 PoC。...

CVE-2021-39165

CVE-2021-39165 此Python脚本能够自动利用Cachet 2.3.18及之前版本中的CVE-2021-39165漏洞。 参考资料： https://github.com/fiveai/Cachet/security/advisories/GHSA-79mg-4w23-4fqc https://nvd.nist.gov/vuln/detail/CVE-2021-39165...

CVE-2021-39172-RCE

CVE-2021-39172 Cachet 2.4：通过 Laravel 配置注入实现的代码执行 关于该漏洞的博客文章 https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ 您可以将其用于CTF或仅用于学习 玩得开心，愿上帝保佑大家...

Cachet <=2.3.18 - SQL Injection

Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the SearchableTraitscopeSearch. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password and...

cachet

Cachet, the open source self-hosted status page system. Cachet 3.x Announcement For more information on the Cachet rebuild and our plans for 3.x, you can read the announcement here. Requirements PHP 8.3 or later Composer A supported database: MariaDB, MySQL, PostgreSQL or SQLite Installation,...

cachet_2.4.0-dev

CVE-2021-39174 Cachet 2.4.0-dev 一个用于 CVE-2021-39174 Cachet 2.4.0-dev 的 python3 脚本，通过 Twig 服务端模板注入实现信息泄露和远程代码执行（RCE）。执行 RCE 需要用户的 API KEY。请参阅下面的 Leave Songs 链接，其中介绍了如何通过 SQL 注入（CVE-2021-39165）获取 API KEY。 开始使用 运行程序 数据提取 python3 cachet2.4.0-dev.py -t http://cachet.site/ -u username -p password 反向...

CVE-2026-69118

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118

CVE-2026-69118 affects Cachet up to version 2.4.1. The vulnerability is a server-side template injection in incident template rendering that allows authenticated users to execute arbitrary PHP code, enabling remote code execution as the web server process. Attackers can craft malicious incident t...

EUVD-2026-55800

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118 Cachet 2.4.1 Authenticated Server-Side Template Injection RCE

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118 Cachet 2.4.1 Authenticated Server-Side Template Injection RCE

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118 Cachet 2.4.1 Authenticated Server-Side Template Injection RCE

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118: Improper Neutralization of Special Elements Used in a Template Engine

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

EUVD-2021-1857

Malware in sbrugna...

Malicious code in @leaffm/leaf-connect-remi-cachet (npm)

The package @leaffm/leaf-connect-remi-cachet was found to contain malicious code...

MAL-2025-8399 Malicious code in @leaffm/leaf-connect-remi-cachet (npm)

The package @leaffm/leaf-connect-remi-cachet was found to contain malicious code...

CVE-2023-43661

Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch...

CVE-2021-39172

Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges User or Admin, can exploit a new line injection in the configuration edition feature e.g. mail settings and gain arbitrary code execution on the server. This issue was addresse...

CVE-2021-39174

Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges User or Admin, can leak the value of any configuration entry of the dotenv file, e.g. the application secret APPKEY and various passwords email, database, etc. This issue was...