CVE-2026-4480-PoC

CVE-2026-4480: инъекция в print-command %J Samba — PoC Важно — прочтите сначала: Этот репозиторий и exploit.py предоставлены только в образовательных и исследовательских целях. Не используйте этот код против систем, сетей или сервисов, на которые у вас нет явного письменного разрешения...

CVE-2026-4480

🚨 CVE-2026-4480 - Критическое удалённое выполнение кода в подсистеме печати Samba Удалённое выполнение кода RCE Уязвимость внедрения команд в печати Samba "Имя задания на печать никогда не должно становиться shell-командой." 📖 Обзор CVE-2026-4480 — критическая уязвимость внедрения команд,...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Injection de commande dans le nom de tâche d'impression Samba Aperçu CVE-2026-4480 est une vulnérabilité d'injection de commande affectant certaines configurations d'impression Samba qui utilisent des commandes d'impression externes. La vulnérabilité existe car...

Exploit for CVE-2020-1472

C...

CVE-2026-70441

Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Create or Item/Configure permission...

EUVD-2026-53535

Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Create or Item/Configure permission...

CVE-2026-70441

Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Create or Item/Configure permission...

CVE-2026-70441: Improper Neutralization of Input During Web Page Generation

Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Create or Item/Configure permission...

PT-2026-68276

Name of the Vulnerable Software and Affected Versions Jenkins Summary Display Plugin versions 1.15 and earlier Description Stored cross-site scripting XSS occurs in build report pages because the job name is not properly escaped within a JavaScript context. This issue can be exploited by users...

Digital-Archiving-Solutions-v1.02-Remote-Code-Execution-POC

Digital-Archiving-Solutions-v1.02-Remote-Code-Execution-POC T...

lpd-shell-injection

LPD Shell Injection — RCE Exploit RFC 1179 A precision Pyth...

Digital-Archiving-Solutions-v1.02-RCE

LPD Shell Injection — RCE Exploit RFC 1179 A precision Pyth...

Digital-Archiving-Solutions-RCE-PoC

LPD Server — Shell Injection Exploit RFC 1179 Disclaimer...

EUVD-2026-34198

ReleaseJobunpack builds jobdir = File.join@releasedir, 'jobs', name and jobtgz = File.join@releasedir, 'jobs', "name.tgz" where name returns @jobmeta'name', a value taken verbatim from the jobs: array of the attacker-supplied release.MF inside the uploaded tarball. These paths are then interpolat...

CVE-2026-41010

ReleaseJobunpack builds jobdir = File.join@releasedir, 'jobs', name and jobtgz = File.join@releasedir, 'jobs', "name.tgz" where name returns @jobmeta'name', a value taken verbatim from the jobs: array of the attacker-supplied release.MF inside the uploaded tarball. These paths are then interpolat...

PT-2026-46136

Name of the Vulnerable Software and Affected Versions BOSH Director versions prior to 282.1.12 Description The ReleaseJobunpack function constructs file paths using the name variable, which is retrieved from the jobs: array within an attacker-supplied release.MF file inside an uploaded tarball...

CVE-2026-7589

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

CVE-2026-7589

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

EUVD-2026-26706

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...

CVE-2026-7589 ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal

A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6. Impacted is the function createcsvexport of the file services/csv-export-service/app/api/v1/endpoints/csvexport.py of the component CSV Export. This manipulation of the argument...