127 matches found
Confluence-CVE-2022-26134
Confluence-CVE-2022-26134 dork on shodan https://www.shodan.io/search?query=http.favicon.hash%3A-305179312&page=2 Curl poc curl -v...
CVE-2025-49844_POC
CVE-2025-49844POC CVE-2025-49844 POC -h View help information ··· Redis has a Redis Lua script remote code execution vulnerability CVE-2025-49844. The root cause of this vulnerability is a design flaw in the interaction between Redis's Lua script engine and its memory management logic. ··· ···...
cve-2026-42945
CVE-2026-42945 — NGINX Rewrite Heap Overrun: Analysis, DoS & Credited RCE Port Security research on CVE-2026-42945 CVSS 4.0 9.2 CRITICAL: a heap buffer overrun in NGINX's script engine where a rewrite with arguments in the replacement e.g. rewrite ^. /new?c=1; leaves the engine's isargs flag set...
ngxray
ngxray Static vulnerability scanner for nginx configurations. Parses configs with nginx's own tokenizer and matches against declarative JSON rules to detect known CVEs in rewrite/script engine directive patterns. Quick start cd ngxray git submodule update --init make python3 scan.py...
OpenEQUELLA permission and access control issue vulnerability
Versions of openEQUELLA prior to 2026.1 contain a security vulnerability. This vulnerability arises because the system.execute function in the script engine fails to validate or utilize an allowed list of executable files when executing operating system commands. As a result, users capable of...
CLSA-2026-1784712190 Fix CVE(s): CVE-2026-42533, CVE-2026-60005
SECURITY UPDATE: heap buffer overflow in nginx worker via map+regex capture variables in script engine - debian/patches/CVE-2026-42533.patch: backport upstream commits ea47fabf55e2 Script: simplified copy capture codes, 7ac67898bdfe Script: buffer overrun protection, 326b17b00383 Script: buffer...
CLSA-2026-1791276939 Fix CVE(s): CVE-2026-42533
SECURITY UPDATE: heap buffer overflow in the script engine when a map regex capture or a non-cacheable variable changes length between the length and copy passes of a string expression - debian/patches/CVE-2026-42533.patch: add buffer end checks to the http and stream script copy codes, the acces...
[SECURITY] [DSA 6496-1] nginx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6496-1 [email protected] https://www.debian.org/security/ Aron Xu September 12, 2026 https://www.debian.org/security/faq -...
Debian dsa-6496 : libnginx-mod-http-geoip - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6496 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6496-1 [email protected] https://www.debian.org/securit...
BIT-MONGODB-2026-13078 Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...
CVE-2026-55799
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-55799 Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-55799
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-55799 Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-55799 Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...
Exploit for CVE-2026-42533
CVE-2026-42533 Pre-auth heap buffer overflow and heap informa...
CVE-2026-71235
Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Go script engine re/golang.go runs scripts through the Yaegi interpreter with stdlib.Symbols, exposing the full Go standard library including os...
EUVD-2026-53308
Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Go script engine re/golang.go runs scripts through the Yaegi interpreter with stdlib.Symbols, exposing the full Go standard library including os...
