foreman: Safemode Bypass leading to RCE

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env

Summary A prototype-pollution gadget in ThreadPool.options allows an attacker who can pollute Object.prototype to execute arbitrary code in Piscina worker threads, invoke arbitrary functions during task scheduling, or inject environment variables into workers. The root cause is that...

NPM: piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env

NPM: piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env vulnerability discovered by ? in WordPress Npm piscina versions 4.9.4...

GHSA-67C8-PQHQ-4RMX piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env

Summary A prototype-pollution gadget in ThreadPool.options allows an attacker who can pollute Object.prototype to execute arbitrary code in Piscina worker threads, invoke arbitrary functions during task scheduling, or inject environment variables into workers. The root cause is that...

Exploit for Path Traversal in Checkpoint Multi-Domain_Security_Management

Check Point Security Management Unauthenticated RCE — Vulnerab...

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Glpi-Project Glpi

CVE-2026-26026 — GLPI Form Dropdown SSTI PoC Authenticated SS...

Blackash-CVE-2025-66516

🚨 CVE-2025-66516 — Critical Apache Tika Vulnerability CVSS: 10.0 | Exploit Type: XXE Injection | Risk Level: MAXIMUM 🎯 Executive Summary CVE-2025-66516 is a critical XML External Entity XXE vulnerability in Apache Tika’s core processing engine. A single malicious PDF with XFA content can trigger:...

Exploit for CVE-2026-102425

🖥️ BAForms-RCE — CVE-2026-102425 GUI Dark-neon GUI scanner/...

Exploit for Deserialization of Untrusted Data in Facebook React

Explanation and full RCE PoC for CVE-2025-55182...

Security Bulletin: Multiple vulnerabilities in i18next-http-middleware affect IBM Cloud Pak System

Summary Multiple vulnerabilities in i18next-http-middleware affect IBM Cloud Pak System CVE-2026-41683, CVE-2026-41690, CVE-2026-42353. Vulnerability Details CVEID:CVE-2026-41683 DESCRIPTION: i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify an...

Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-24072 DESCRIPTION: An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of...

SUSE-SU-2026:4409-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2026-18301: Vulnerability Report at readchanneldata bsc1276230. - CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow bsc1276231. - CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow bsc1276232. - CVE-2026-18304: TIF File...

cve-poc-lab

CVE PoC Lab 보안 학습/검증 목적으로 주요 CVE 취약점을 재현PoC하는 모음집입니다. 재현 환경...

Exploit for Incorrect Implementation of Authentication Algorithm in Vmware Vcenter_Server

VC-Strike VMware vCenter Integrated Authorization Penetrati...

Rocky Linux 8 [CIQ] Security Update: git / git-all / git-core / git-core-debuginfo / git-core-doc / etc Multiple Vulnerabilities (crlsa-2024_4084)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244084 advisory. git: Recursive clones RCE CVE-2024-32002 git: RCE while cloning local repos CVE-2024-32004 git: additional local RCE CVE-2024-32465 git: insecure hardlinks...

Rocky Linux 8 [CIQ] Security Update: pandoc / pandoc-common (crlsa-2022_5597)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225597 advisory. cmark-gfm: possible RCE due to integer overflow CVE-2022-24724 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 9.6 [TuxCare] Security Update: redis / redis-devel / redis-doc (ALMALINUX9.6:CLSA-2026:1788963269)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788963269 advisory. - Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE...

CentOS Linux 8.4 [TuxCare] Security Update: binutils / binutils-devel (CENTOS8.4:CLSA-2026:1783081026)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1783081026 advisory. - A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF Extended Common Object...

Rocky Linux 9.6 [TuxCare] Security Update: redis / redis-devel / redis-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778616298)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778616298 advisory. - Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can...

Rocky Linux 10.1 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc (crlsa-2026_12265)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202612265 advisory. libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing CVE-2026-4775 Tenable has extracted the...