CVE-2026-66786 Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets

A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...

CVE-2026-66786

Submariner 's certificate-based IPsec authentication mode (IPSecCertAuthMode: true) is vulnerable to ipsec.conf stanza injection via remote-supplied CableName and subnets fields in the Custom Resource Definition. Because these free-form strings are incorporated into the connection configuration w...

cpanel-malware-cleaner-cve-2026

🚨 Nettoyeur de Malware cPanel – Outil de Correction CVE-2026-41940 Un outil de sécurité léger et puissant pour détecter, supprimer et prévenir les infections par malware causées par les récentes vulnérabilités cPanel, notamment CVE-2026-41940. 🔥 Fonctionnalités Détecte et supprime les malwares,...

cve-2025-55182

🛡️ React2Shell CTF 🚀 Добро пожаловать в React2Shell-CTF — Docker-среду, предназначенную для отработки эксплуатации React2Shell CVE-2025-55182. React2Shell — это критическая уязвимость, затрагивающая приложения на базе React. Этот репозиторий предоставляет безопасный, локально разворачиваемый...

MAL-2026-15824 Malicious code in @stellarshift/token-units (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4433d82919da9c0972986247dd611eae3997b28fd54726ffbf9c48147c05211 Package advertises BigInt token-unit conversion helpers parseUnits/formatUnits but declares a postinstall hook scripts/postinstall.js that invokes...

MAL-2026-15823 Malicious code in @stellarshift/evm-address-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ad9957f1e31e5afe261cb73c0c5b76ff23a86b23ebae0704e7e2934be79979 The package declares a postinstall script that invokes syncRemoteManifest in lib/runtime/manifest-sync.js. The destination URL is not present in...

Malicious code in @stellarshift/evm-address-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ad9957f1e31e5afe261cb73c0c5b76ff23a86b23ebae0704e7e2934be79979 The package declares a postinstall script that invokes syncRemoteManifest in lib/runtime/manifest-sync.js. The destination URL is not present in...

Malicious code in @stellarshift/abi-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebef764845634817dcc9905a146c3ba898707dcc9937ebfe0060a4f10852d27 On npm install, the package's postinstall hook resolves a URL that is stored as an XOR-encoded integer array in endpoint-registry.json self-labeled...

Malicious code in @stellarshift/token-units (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4433d82919da9c0972986247dd611eae3997b28fd54726ffbf9c48147c05211 Package advertises BigInt token-unit conversion helpers parseUnits/formatUnits but declares a postinstall hook scripts/postinstall.js that invokes...

MAL-2026-15822 Malicious code in @stellarshift/chain-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932d9a57667edad733439fadfc1754573429369cb8e65fe094c7bed1ed81c5e6 The package's postinstall lifecycle script fetches and executes arbitrary code from a remote URL that is stored XOR-encoded in endpoint-registry.json...

CVE-2024-47176

CVE-2024-47176 — Лаборатория эксплуатации CUPS RCE Кибербезопасность и виртуализация 2025–2026 Изолированная лабораторная среда для демонстрации CVE-2024-47176 удалённое выполнение кода в CUPS через cups-browsed. Настройка Требуемые VDI Ubuntu 22.04 НЕ 24.04! — https://www.osboxes.org/ubuntu/ →...

CVE-2026-53649

Joro is a web exploitation framework by BishopFox. Prior to version 1.1.1 , its default proxy mode exposes a local API on 127.0.0.1:9090 with no authentication and a wildcard CORS policy . Because plugin uploads use the CORS-safelisted multipart/form-data content type, cross-origin JavaScript on ...

EUVD-2026-70238

Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication and applies a wildcard CORS policy. Because plugin uploads use the CORS-safelisted multipart/form-data content type, cross-origin JavaScrip...

CVE-2026-53649 Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE

Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication and applies a wildcard CORS policy. Because plugin uploads use the CORS-safelisted multipart/form-data content type, cross-origin JavaScrip...

CVE-2026-53649 Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE

Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication and applies a wildcard CORS policy. Because plugin uploads use the CORS-safelisted multipart/form-data content type, cross-origin JavaScrip...

CVE-2024-50379

Apache Tomcat CVE-2024-50379 TOCTOU Exécution de code à distance...

CVE-2026-49832 DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDN

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

CVE-2026-49832

DSpace is an open-source institutional repository. Versions 8.0–8.3, 9.0–9.2 , and 10-rc1 are vulnerable to Remote Code Execution via Velocity Templates used for COAR Notify/LDN messages. The root cause is that the template context exposed the full ConfigurationService object to Velocity, enablin...

CVE-2026-49832 DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDN

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

CVE-2026-82404

TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a proto, constructor, or prototype key wrote through the object prototype chain instead of creating an own property, polluting Object.prototype for the runtime. In...