CVE-2026-0303

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

EUVD-2026-75269

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

Security Bulletin: ACE vulnerability in conditional configuration file processing by QOS.CH logback-core

Summary Upgrade to new jsonListener.jar Vulnerability Details CVEID:CVE-2026-13006 DESCRIPTION: ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.36 in Java applications, allows an attacker to execute arbitrary code circumventing...

Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file. Work around: Until a fixed version is deployed, avoid running Checkov over untrusted content, an...

CVE-2023-5961

此仓库包含一个 Python 脚本和一个 nuclei 模板，旨在检测 Moxa ioLogik 设备中的漏洞，特别关注 CVE-2023-5961 漏洞。此外，它还提供了有关该漏洞和相关安全公告的信息。 漏洞信息 CVE 编号：CVE-2023-5961 安全公告：Moxa 安全公告 MPSA-235250 该安全公告详细描述了影响 Moxa ioLogik E1200 系列 Web 服务器的漏洞，可能导致未经授权的访问或其他安全问题。...

Gitea 1.1.0 - 1.12.5 - Remote Code Execution

Gitea 1.1.0 through 1.12.5 is susceptible to authenticated remote code execution, via the git hook functionality, in customer environments where the documentation is not understood e.g., one viewpoint is that the dangerousness of this feature should be documented immediately above the...

EUVD-2026-75162

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

CVE-2026-85384

A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...

CVE-2026-86540

knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafting a malicious .knowns/config.json file. When a repository with a crafted configuration is opened, the unvalidated binar...

CVE-2026-86540

Knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files. An attacker who crafts a malicious .knowns/config.json file in a repository can cause the unvalidated binary path to be executed twice under the user's account with no verificati...

TP-Link-ArcherC5-RCE

TP-Link Archer C5 通过恶意配置文件上传实现认证远程代码执行 CVE-2018-19537 描述 TP-Link Archer C5 路由器的所有已发布固件版本中存在一个经过认证的远程代码执行（RCE）漏洞。通过上传精心制作的配置文件，攻击者可以注入以 root 权限运行的 OS 命令。 Archer C5 路由器允许管理用户将当前配置参数保存到文件，并从文件恢复参数。当用户尝试在 Web GUI 中设置这些参数时，它们似乎经过了适当的净化处理。然而，当从配置文件中设置这些参数时，它们并未得到适当的净化。特别是，我们通过上传配置文件中的 wandynhostname 1...

EUVD-2026-71776

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, without line-ending sequences being...

CVE-2026-75925

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, without line-ending sequences being...

CVE-2026-75925 IXON VPN Client CRLF Injection

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, without line-ending sequences being...

CVE-2026-75925

IXON VPN Client versions prior to 1.4.7 contain a CRLF injection vulnerability (CWE-93, with contributing CWE-306) that enables remote code execution with root or SYSTEM privileges . The local configuration service accepts changes without authenticating the requester and writes values to a file l...

CVE-2026-85674 aider 0.86.2 Remote Code Execution via .aider.conf.yml

aider aider-chat automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd executed at startup or lint-cmd executed on the first file edit, which aider runs through a shell subprocess with shell=True witho...

EUVD-2026-71130

aider aider-chat automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd executed at startup or lint-cmd executed on the first file edit, which aider runs through a shell subprocess with shell=True witho...

After Veeam ONE 13.1.0.7034 Upgrade: No connection could be made because the target machine actively refused it. (localhost:2743)

Article Applicability The issue described in this article only occurs for deployments in which Veeam ONE was installed to a folder other than the default C:\Program Files\Veeam\Veeam ONE\ path. Challenge After Veeam ONE is upgraded to version 13.1 build 13.1.0.7034, reports cannot be generated an...

CVE-2026-18743

popt (specifically the poptConfigFileToString function in popt-static/popt-devel) contains a short realloc bug that can cause heap metadata corruption when a host loads specially crafted configuration content. Successful exploitation results in a low-impact denial of service due to process unavai...

EUVD-2026-68609

The affected Ebyte product exports administrative credentials and other sensitive configuration information without adequate protection. An unauthenticated attacker on the adjacent network who can obtain an exported configuration file could recover valid credentials and use them to access the...