cmdchamp

cmdchamp Bash CLI trainer — 30 levels from ls to privilege escalation. Every question asks you to type a real command — get instant feedback, move on. Miss one and it doesn't just show you the answer: it shows what YOUR command printed against what was wanted, and for a pipeline the line count at...

CVE-2026-83495

A flaw in the Trainer v2 TrainJob API allows users with permission to create TrainJobs to perform namespace secret exfiltration . By injecting valueFrom.secretKeyRef into environment variable definitions, an attacker can read sensitive secrets when the TrainJob Role-Based Access Control (RBAC) is...

EUVD-2026-118951

A flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting valueFrom.secretKeyRef into environment variable definitions. This allows them to read and exfiltrate sensitive information secrets from the namespace, leading to a privilege...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113717 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113717 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113714 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113714 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113718 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113718 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113720 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113720 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113723 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113723 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113719 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113719 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113721 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113721 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113716 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113716 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113724 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113724 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113722 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113722 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113725 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113725 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113726 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113726 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-113732 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-113732 Source advisory:...

CVE-2026-107507

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to...

CVE-2026-107507

The Squadeno WordPress plugin (versions prior to 1.12.0 ) contains an incorrect authorization vulnerability (CWE-863). The application fails to consistently enforce restrictions when saving a sport, which allows users with the lowest-tier Trainer role to modify attributes of an assigned sport. Af...

EUVD-2026-96744

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to...

CVE-2026-107507 Squadeno < 1.12.0 - Trainer+ Section and Age Group Reassignment via Quick Edit

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to...