CVE-2026-9198_exploit

CVE-2026-9198 — RCE non autenticata in Langflow OSS Esecuzione di codice in remoto non autenticata in IBM Langflow OSS 1.0.0 – 1.10.0 in un'installazione predefinita. Combina due vulnerabilità: CVE-2026-9103 — GET /api/v1/autologin emette un JWT SUPERUSER a qualsiasi chiamante senza credenziali...

CVE-2026-33017

CVE-2026-33017 - RCE senza autenticazione in Langflow ⚠️ AVVERTENZA: Questo repository è destinato esclusivamente a test di sicurezza autorizzati e a scopi educativi. Utilizzare solo su sistemi di cui si è proprietari o su cui si ha esplicita autorizzazione al test. L'autore non è responsabile per...

Blackash-CVE-2025-68613

🚨 CVE-2025-68613 — RCE critica in n8n Gravità: 🔴 Critica Impatto: Esecuzione di codice remoto Remote Code Execution Piattaforma interessata: n8n automazione dei flussi di lavoro 🧩 Panoramica CVE-2025-68613 è una vulnerabilità di sicurezza critica in n8n , una piattaforma open-source di automazion...

pdf.js-CVE-2024-4367

🚨 CVE-2024-4367 - Scanner universale per vulnerabilità PDF.js ⚠️ STRUMENTO DI SICUREZZA CRITICO | Rileva CVE-2024-4367 CVSS 9.8 - Vulnerabilità di esecuzione remota di codice in PDF.js Funziona su QUALSIASI sito web - Zero configurazione richiesta 📋 Indice dei Contenuti 📖 Panoramica ⚡ Avvio Rapido...

avscript

Avast Antivirus JavaScript-Interpreter HINWEIS: Am 03.11.2020 gab Avast bekannt, dass sie beschlossen hatten, diesen Interpreter global zu deaktivieren! Der Hauptprozess des Avast-Antivirenprogramms heißt AvastSvc.exe und wird als SYSTEM ausgeführt. Dieser Dienst lädt die Low-Level-Antiviren-Engi...

CVE-2021-29440

CVE-2021-29440 Elaborazione Twig non sicura delle pagine statiche che porta a RCE in Grav CMS 1.7.10 Grav è una piattaforma web basata su file. L'elaborazione Twig delle pagine statiche può essere abilitata nel front matter da qualsiasi utente amministrativo autorizzato a creare o modificare...

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - Exploit d'exécution de code à distance XWiki PoC pour CVE-2025-24893 – Exécution de code à distance via la macro XWiki Inspiré par le PoC original d'Artemir Description Ceci est un exploit de validation de concept PoC pour CVE-2025-24893 , une vulnérabilité d'exécution de code à...

CVE-2026-75574

CVE-2026-75574 is a remote code execution vulnerability in the Grav Email plugin (getgrav/grav-plugin-email) versions before 4.2.2 . The root cause is that page-editor-controlled Email action parameters are rendered as unsandboxed Twig templates . An authenticated remote user possessing only api....

SGLang-0.5.9-RCE

SGLang SSTI से RCE PoC — अनसैंडबॉक्स्ड Jinja2 चैट टेम्पलेट रेंडरिंग CVE-2026-5760 SGLang के reranking एंडपॉइंट में Server-Side Template Injection SSTI के माध्यम से Remote Code Execution। एक दुर्भावनापूर्ण GGUF मॉडल फ़ाइल जिसमें क्राफ्टेड tokenizer.chattemplate होता है, SGLang में लोड होने और...

CVE-2026-72827

Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-privileged page editors to execute arbitrary operating-system commands. Attackers can inject Twig payloads using the unsandboxed find filter in email subject, body, to, or fro...

CVE-2026-72827 Grav CMS before 2.0.13 Remote Code Execution via Twig

Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-privileged page editors to execute arbitrary operating-system commands. Attackers can inject Twig payloads using the unsandboxed find filter in email subject, body, to, or fro...

CVE-2026-73486

CVE-2026-73486 (Flowise) : Flowise versions before 3.1.3 contain a code injection vulnerability in the CSV Agent node’s customReadCSV parameter. An authenticated attacker can trigger arbitrary Python code execution by bypassing a static regex blocklist used for validation, enabling code execution...

CVE-2026-73486 Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV

Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter that allows authenticated attackers to execute arbitrary Python code. The validator uses a static regex blocklist that can be bypassed through obfuscation techniques, enabling attackers to...

EUVD-2026-57801

Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the...

CVE-2026-72718

Goose before v1.44.0 is vulnerable: the goose review path runs Git diff with a user-controlled core.fsmonitor config via the repository’s .git/config. This lets an attacker with a malicious repo execute arbitrary commands when git diff runs for touched_files()/collect_diff(), since the context-ga...

EUVD-2026-55653

goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the goose review command runs the system git executable to gather the diff for review without stripping attacker-controlled Git configuration. A malicious repository whose .git/config sets core fsmonitor = causes Git to...

CVE-2026-70609

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, the mode option of webContents.openDevTools was not sanitized before use by the DevTools frontend. If an attacker can influence this value,...

Improper Encoding or Escaping of Output

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the mode parameter of the openDevTools function. An attacker ca...

CVE-2026-71278

rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create api/src/controller/calcrulerouter.rs containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication...

CVE-2026-71291 Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering

Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field definition's allowtwig flag and a regex...