287 matches found
CVE-2026-0770-PoC
CVE-2026-0770 - Langflow Remote Code Execution Summary Langflow contains a critical remote code execution vulnerability in the validatecode function located in src/lfx/src/lfx/custom/validate.py. The function uses exec to execute user-supplied Python code without sandboxing, allowing arbitrary...
CVE-2026-9198_exploit
CVE-2026-9198 β Langflow OSS Unauthenticated RCE Unauthenticated remote code execution in IBM Langflow OSS 1.0.0 β 1.10.0 on a default deployment. Chains two flaws: CVE-2026-9103 β GET /api/v1/autologin mints a SUPERUSER JWT to any caller with no credentials whenever AUTOLOGIN is enabled the...
CVE-2026-33154
Dynaconf SSTI Vulnerability Report Summary Dynaconf is vulnerable to Server-Side Template Injection SSTI due to unsafe template evaluation in the @Jinja resolver. When the jinja2 package is installed, Dynaconf evaluates template expressions embedded in configuration values without a sandboxed...
SGLang-0.5.9-RCE
SGLang SSTI to RCE PoC β Unsandboxed Jinja2 Chat Template Rendering CVE-2026-5760 Remote Code Execution via Server-Side Template Injection SSTI in SGLang's reranking endpoint. A malicious GGUF model file with a crafted tokenizer.chattemplate achieves arbitrary code execution when loaded into SGLa...
CVE-2021-29440
CVE-2021-29440 Unsafe Twig processing of static pages leading to RCE in Grav CMS 1.7.10 Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this...
pdf.js-CVE-2024-4367
π¨ CVE-2024-4367 - Universal PDF.js Vulnerability Scanner β οΈ CRITICAL SECURITY TOOL | Detects CVE-2024-4367 CVSS 9.8 - PDF.js Remote Code Execution Vulnerability Works on ANY website - Zero configuration required π Table of Contents π Overview β‘ Quick Start π What It Detects π οΈ How It Works π Output...
CVE-2025-24893-Reverse-Shell
CVE-2025-24893 - XWiki Remote Code Execution Exploit PoC for CVE-2025-24893 β XWiki Macro Remote Code Execution Inspired by Artemir's original PoC Description This is a Proof-of-Concept PoC exploit for CVE-2025-24893 , a Remote Code Execution RCE vulnerability in vulnerable versions of XWiki. The...
Blackash-CVE-2025-68613
π¨ CVE-2025-68613 β Critical RCE in n8n Severity: π΄ Critical Impact: Remote Code Execution Affected Platform: n8n workflow automation 𧩠Overview CVE-2025-68613 is a critical security vulnerability in n8n , an open-source workflow automation platform. The issue allows an authenticated attacker to...
CVE-2026-33017
CVE-2026-33017 - Langflow Unauthenticated RCE β οΈ DISCLAIMER: This repository is for authorized security testing and educational purposes only. Use only on systems you own or have explicit permission to test. The author is not responsible for any misuse or damage caused by this tool. Overview...
avscript
Avast Antivirus JavaScript Interpreter NOTE: On 03/11/2020 Avast announced they had decided to disable this interpreter globally! The main Avast antivirus process is called AvastSvc.exe, which runs as SYSTEM. That service loads the low level antivirus engine, and analyzes untrusted data received...
CVE-2026-110453
Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients...
Insecure Default Initialization of Resource
Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the webpreferences attribute on a tag, which omitted nodeIntegrationInWorke...
Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
Impact A could enable Node.js integration in its Web Workers even when its embedder had Node.js integration disabled, giving guest content more privilege than the embedder allowed. Apps are only affected if they enable the tag and the embedder is unsandboxed. Apps that do not use , or that keep t...
CVE-2026-91925 Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine
Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace, conditions, presets, or dependencie...
CVE-2026-91925 Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine
Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace, conditions, presets, or dependencie...
PT-2026-91930
Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace, conditions, presets, or dependencie...
qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`
SummaryThe qwed package version 5.1.1 passes attacker-controlled input directly to SymPy's parseexpr function without a restricted namespace. Because parseexpr internally calls Python's eval, any authenticated tenant can execute arbitrary Python code inside the API server process. The attack...
PT-2026-88937
An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...
CVE-2026-82877 ILIAS Arbitrary File Read via SOAP addFile
ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an unsandboxed import...
CVE-2026-82447 Skyvern before 1.0.45 Sandbox Escape via TextPromptBlock
Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment. Attackers can inject malicious Jinja template syntax through workflow parameters or upstream block...