Lucene search
+L

570 matches found

Kitploit
Kitploit
added 2026/09/15 12:13 a.m.6 views

Mnemosyne

Mnemosyne 나의 개인 정보보안 메모 재미있는 사실 이 프로젝트의 이름은 그리스의 기억의 여신 Mnemosyne 에서 유래했습니다. 더 나아가, 우리 이야기와 관련하여 흥미로운 점은 이것이 memory라는 단어의 기원이라는 것입니다. 사용법 Mnemosyne는 제 웹사이트의 동일한 이름의 서브도메인에서 공개적으로 이용 가능합니다. 사이트는 GitLab Pages로 호스팅됩니다. 이 링크를 통해 접속할 수 있습니다. 나만의 웹사이트 실행하기 웹사이트를 실행하려면 먼저 Hugo를 설치해야 합니다. 그런 다음, 제 저장소를...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 8:27 p.m.8 views

kismet-docs

非推奨(DEPRECATED) このリポジトリは現在 kismet-web-docs リポジトリに統合されており、今後の変更はすべてそちらで行う必要があります。 新しいサイトエンジンは Hugo を使用しており、ドキュメントの多くの部分はテンプレート付きの YAML データに変換されています。...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/09/11 12:16 p.m.9 views

CVE-2026-89258

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS0.00315EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/11 12:16 p.m.10 views

CVE-2026-89259

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.8CVSS0.00411EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/11 11:15 a.m.38 views

CVE-2026-89259 Hugo before v0.165.0 Insufficient Permission Restriction via TailwindCSS

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.8CVSS0.00411EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/11 11:15 a.m.10 views

CVE-2026-89259

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.8CVSS0.00411EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 11:15 a.m.8 views

CVE-2026-89259 Hugo before v0.165.0 Insufficient Permission Restriction via TailwindCSS

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.3CVSS5.5AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/11 11:15 a.m.9 views

EUVD-2026-76071

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.8CVSS0.00411EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/11 11:15 a.m.25 views

CVE-2026-89259

Hugo , a static site generator, introduced Node's permission model in v0.161.0 to restrict tools executed during builds. However, TailwindCSS — present in the default security.exec.allow list — requires highly permissive flags (--allow-addons, --allow-child-process, --allow-worker), effectively b...

9.8CVSS0.00411EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/11 11:15 a.m.18 views

CVE-2026-89258

Hugo (static site generator) versions after v0.123.0 and before v0.165.0 are vulnerable to a symlink confinement bypass via direct resource lookups such as resources.Get and os.ReadFile. Symlinks in parent directories were not dropped during these lookups, allowing an attacker who can place a sym...

9.3CVSS0.00315EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/11 11:15 a.m.9 views

CVE-2026-89258 Hugo before v0.165.0 Symlink Confinement Bypass via resources.Get

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS0.00315EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/11 11:15 a.m.39 views

CVE-2026-89258 Hugo before v0.165.0 Symlink Confinement Bypass via resources.Get

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS0.00315EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 11:15 a.m.6 views

CVE-2026-89258 Hugo before v0.165.0 Symlink Confinement Bypass via resources.Get

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS5.5AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/09/11 11:15 a.m.12 views

CVE-2026-89258

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS0.00315EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/11 11:15 a.m.8 views

EUVD-2026-76070

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS0.00315EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-89259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS included in the default...

9.8CVSS0.00411EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.13 views

PT-2026-89862

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.8CVSS0.00411EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.9 views

PT-2026-89861

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS0.00315EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-89258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups,...

9.3CVSS0.00315EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/31 12:15 p.m.9 views

CVE-2026-10618

A flaw was found in Hugo's default fenced-code-block renderer. This vulnerability allows a remote attacker to inject arbitrary script code into the rendered HTML by providing specially crafted input in the code-fence info string. Due to improper escaping of attribute values, a malicious quote can...

5.4CVSS6.3AI score0.00215EPSS
SaveExploits0References8
Rows per page
Query Builder