SGLang-0.5.9-RCE

SGLang SSTI to RCE PoC — Unsandboxed Jinja2 Chat Template Rendering CVE-2026-5760 Remote Code Execution via Server-Side Template Injection SSTI in SGLang's reranking endpoint. A malicious GGUF model file with a crafted tokenizer.chattemplate achieves arbitrary code execution when loaded into SGLa...

CVE-2026-33017

CVE-2026-33017 - RCE no autenticado en Langflow ⚠️ AVISO: Este repositorio es solo para pruebas de seguridad autorizadas y fines educativos. Úselo solo en sistemas de su propiedad o para los que tenga permiso explícito. El autor no se hace responsable del mal uso o daños causados por esta...

pdf.js-CVE-2024-4367

🚨 CVE-2024-4367 - Escáner Universal de Vulnerabilidad PDF.js ⚠️ HERRAMIENTA DE SEGURIDAD CRÍTICA | Detecta CVE-2024-4367 CVSS 9.8 - Vulnerabilidad de Ejecución Remota de Código en PDF.js Funciona en CUALQUIER sitio web - Sin configuración requerida 📋 Tabla de Contenidos 📖 Resumen ⚡ Inicio Rápido 🔍...

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - Exploit de ejecución remota de código en XWiki PoC para CVE-2025-24893 – Ejecución remota de código mediante macro de XWiki Inspirado en el PoC original de Artemir Descripción Este es un exploit de prueba de concepto PoC para CVE-2025-24893 , una vulnerabilidad de ejecución remot...

CVE-2021-29440

CVE-2021-29440 Unsafe Twig processing of static pages leading to RCE in Grav CMS 1.7.10 Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this...

avscript

Avast Antivirus JavaScript Interpreter NOTE: On 03/11/2020 Avast announced they had decided to disable this interpreter globally! The main Avast antivirus process is called AvastSvc.exe, which runs as SYSTEM. That service loads the low level antivirus engine, and analyzes untrusted data received...

CVE-2026-33154

Dynaconf SSTI Vulnerability Report Summary Dynaconf is vulnerable to Server-Side Template Injection SSTI due to unsafe template evaluation in the @Jinja resolver. When the jinja2 package is installed, Dynaconf evaluates template expressions embedded in configuration values without a sandboxed...

CVE-2026-0770-PoC

CVE-2026-0770 - Langflow Remote Code Execution Summary Langflow contains a critical remote code execution vulnerability in the validatecode function located in src/lfx/src/lfx/custom/validate.py. The function uses exec to execute user-supplied Python code without sandboxing, allowing arbitrary...

CVE-2026-9198_exploit

CVE-2026-9198 — Langflow OSS Unauthenticated RCE Unauthenticated remote code execution in IBM Langflow OSS 1.0.0 – 1.10.0 on a default deployment. Chains two flaws: CVE-2026-9103 — GET /api/v1/autologin mints a SUPERUSER JWT to any caller with no credentials whenever AUTOLOGIN is enabled the...

Blackash-CVE-2025-68613

🚨 CVE-2025-68613 — Critical RCE in n8n Severity: 🔴 Critical Impact: Remote Code Execution Affected Platform: n8n workflow automation 🧩 Overview CVE-2025-68613 is a critical security vulnerability in n8n , an open-source workflow automation platform. The issue allows an authenticated attacker to...

Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

Impact A could enable Node.js integration in its Web Workers even when its embedder had Node.js integration disabled, giving guest content more privilege than the embedder allowed. Apps are only affected if they enable the tag and the embedder is unsandboxed. Apps that do not use , or that keep t...

CVE-2026-91925 Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine

Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace, conditions, presets, or dependencie...

CVE-2026-91925 Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine

Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace, conditions, presets, or dependencie...

PT-2026-91930

Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace, conditions, presets, or dependencie...

qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`

SummaryThe qwed package version 5.1.1 passes attacker-controlled input directly to SymPy's parseexpr function without a restricted namespace. Because parseexpr internally calls Python's eval, any authenticated tenant can execute arbitrary Python code inside the API server process. The attack...

PT-2026-88937

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...

CVE-2026-82877 ILIAS Arbitrary File Read via SOAP addFile

ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an unsandboxed import...

CVE-2026-82447 Skyvern before 1.0.45 Sandbox Escape via TextPromptBlock

Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment. Attackers can inject malicious Jinja template syntax through workflow parameters or upstream block...

CVE-2026-82278

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...

CVE-2026-82278 BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...