CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Ruby on Rails Active Storage + libvips lettura file arbitrari → PoC per esecuzione di codice remoto RCE condizionale. File singolo, Python 3.11+, solo libreria standard, zero dipendenze , con payload misto MAT/HDF5 integrato, decoder PNG in puro Python, lettura a...

EUVD-2026-67837

Flextype CMS through v1.0.0-dev contains an expression language injection vulnerability that allows authenticated attackers with a valid API token to read arbitrary files by passing unsanitized user-supplied input to the Symfony ExpressionLanguage engine via the POST /api/v1/query endpoint...