ghostsplice

GhostSplice: cross-channel trust fragmentation attack PoC Proof-of-concept code for GhostSplice , an attack from the ASSET Research Group. The full write-up is "The AI refused to steal the secrets. So we handed it a form.". The idea in plain words AI coding assistants like Cursor, VS Code with...

MagicMirror <= 2.35.0 - Server-Side Request Forgery

An unauthenticated Server-Side Request Forgery SSRF vulnerability in the /cors endpoint allows any remote attacker to force the MagicMirror² server to perform arbitrary HTTP requests to internal networks, cloud metadata services, and localhost services. The endpoint also expands environment...

CVE-2026-78122-POC

CVE-2026-78122 — Proof of Concept Tecnativadocker-socket-proxy ≤ 0.5.0 — Insufficient Access-Control Granularity CWE-1220 CVSS 4.0: 8.3 High — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N Attack Vector is Adjacent AV:A: the attacker needs local/adjacent network reach to the pro...

LeitWacht

GitLab Runner Leitwacht GitLab Runner CI/CDコンテナのネットワーク出口制限。Leitwachtは、各ジョブコンテナがアクセスできるネットワークを制御することで、サプライチェーン攻撃によるシークレットの外部流出を防ぎます。 動作の仕組み Leitwachtは、各ノード上でGitLab Runnerと並行して動作するスタンドアロンエージェントです。コンテナ起動イベントを傍受し、強制プリミティブをアタッチし、すべてのネットワークアクティビティを中央バックエンドに報告します。GitLab Runnerの変更は不要です。 強制スタック（コンテナごと）...

EUVD-2026-85639

A flaw was found in AWX. The container group podspecoverride field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can...

CVE-2026-55158 Conflibot: Command injection via crafted pull request branch names under pull_request_target

Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests. Prior to 1.2.1, src/index.ts builds git checkout, git merge, and git format-patch commands by interpolating the attacker-controlled pull request head.ref value into strings passed to exec. In...

CVE-2026-55158

Conflibot (a GitHub Action that warns about merge conflicts among open pull requests) is vulnerable to command injection via crafted pull request branch names. Prior to version 1.2.1, src/index.ts interpolates the attacker-controlled head.ref value into shell strings passed to exec, allowing an a...

CVE-2026-55158: Improper Neutralization of Special Elements used in an OS Command

Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests. Prior to 1.2.1, src/index.ts builds git checkout, git merge, and git format-patch commands by interpolating the attacker-controlled pull request head.ref value into strings passed to exec. In...

CVE-2026-57866

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

CVE-2026-57866: Server-Side Request Forgery (SSRF)

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

PT-2026-88923

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the ai generate text function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

OESA-2026-3700 python-GitPython security update

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fixes: GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options...

Malicious code in wallet-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5197e979c868a6e4ea36c49ad9cace9d5074f1deb961b35f824e3d05934113 On npm install, the package's postinstall hook src/scan.cjs walks the installer's project tree starting three directories above nodemodules and...

MAL-2026-15871 Malicious code in wallet-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5197e979c868a6e4ea36c49ad9cace9d5074f1deb961b35f824e3d05934113 On npm install, the package's postinstall hook src/scan.cjs walks the installer's project tree starting three directories above nodemodules and...

Malicious code in order-package-saas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb09ffe18928cf319d13dc52111750c394330d53b38b4d8814b0d2372471308e The package's postinstall hook executes index.js, which sweeps installer-owned secrets from the home directory...

CVE-2025-15613 Kyverno before v1.13.4 SSRF via Service Call

Kyverno before v1.13.4 is vulnerable to server-side request forgery SSRF via its Service Call functionality. An attacker with permission to create Kyverno ClusterPolicies can specify an external URL in a policy's apiCall/service configuration; although Service Call is documented for in-cluster...

Malicious code in evilpostinstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e500b06f58769a2cb833be8e726ab1db04b327f4c614da6642eb46ae7dfe5 The package's postinstall lifecycle hook pipes the output of env through nc to a host reconstructed at install time from the package version string v...

EUVD-2026-66220

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

CVE-2026-80198

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

CVE-2026-80198 Kimai before 2.56.0 Information Disclosure via config() Twig Function

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...