CVE-2026-4480

🚨 CVE-2026-4480 - Critical Remote Code Execution in Samba Printing Subsystem Remote Code Execution RCE Samba Print Command Injection Vulnerability "A single print job name should never become a shell command." 📖 Overview CVE-2026-4480 is a critical command injection vulnerability affecting Samba'...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Samba Print Job Name Command Injection Overview CVE-2026-4480 is a command injection vulnerability affecting certain Samba printing configurations that use external print commands. The vulnerability exists because Samba inserts user-controlled print job metadata...

CVE-2026-4480-PoC

CVE-2026-4480: Samba print-command %J injection PoC Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written authorization...

Exploit for CVE-2020-1472

C...

CVE-2026-70441

Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Create or Item/Configure permission...

CVE-2026-70441

Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Create or Item/Configure permission...

EUVD-2026-53535

Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Create or Item/Configure permission...

CVE-2026-70441

Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Create or Item/Configure permission...

PT-2026-68276

Name of the Vulnerable Software and Affected Versions Jenkins Summary Display Plugin versions 1.15 and earlier Description Stored cross-site scripting XSS occurs in build report pages because the job name is not properly escaped within a JavaScript context. This issue can be exploited by users...

CVE-2026-70441: Improper Neutralization of Input During Web Page Generation

Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Create or Item/Configure permission...

Digital-Archiving-Solutions-v1.02-Remote-Code-Execution-POC

Digital-Archiving-Solutions-v1.02-Remote-Code-Execution-POC T...

Digital-Archiving-Solutions-v1.02-RCE

LPD Shell Injection — RCE Exploit RFC 1179 A precision Pyth...

lpd-shell-injection

LPD Shell Injection — RCE Exploit RFC 1179 A precision Pyth...

Digital-Archiving-Solutions-RCE-PoC

LPD Server — Shell Injection Exploit RFC 1179 Disclaimer...

CLSA-2026-1780662711 samba: Fix of CVE-2026-4480

CVE-2026-4480: fix unauthenticated RCE in the printing %J substitution by masking shell-unsafe characters in the client-supplied job name...

CLSA-2026-1780943682 samba: Fix of CVE-2026-4480

Rebase onto RHEL samba-4.14.5-9.el85: CVE-2021-44142, the CVE-2020-25717 username map script regression, the domain-join segfault and the dangling symlink directory deletion fixes are now provided by the base. - Re-apply TuxCare ELS security backports on the new base: - CVE-2022-32742: fix server...

CLSA-2026-1780672424 samba: Fix of CVE-2026-4480

CVE-2026-4480: fix unauthenticated RCE in the printing %J substitution by masking shell-unsafe characters in the client-supplied job name...

CLSA-2026-1780662239 samba: Fix of CVE-2026-4480

CVE-2026-4480: fix unauthenticated RCE in the printing %J substitution by masking shell-unsafe characters in the client-supplied job name...

CVE-2026-41010

ReleaseJobunpack builds jobdir = File.join@releasedir, 'jobs', name and jobtgz = File.join@releasedir, 'jobs', "name.tgz" where name returns @jobmeta'name', a value taken verbatim from the jobs: array of the attacker-supplied release.MF inside the uploaded tarball. These paths are then interpolat...

EUVD-2026-34198

ReleaseJobunpack builds jobdir = File.join@releasedir, 'jobs', name and jobtgz = File.join@releasedir, 'jobs', "name.tgz" where name returns @jobmeta'name', a value taken verbatim from the jobs: array of the attacker-supplied release.MF inside the uploaded tarball. These paths are then interpolat...