GHSA-JW39-3688-R4RX Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Impact A Server-Side Template Injection SSTI vulnerability exists in multiple locations of trestle's Jinja2 rendering pipeline due to a systemic pattern: untrusted data is re-parsed as Jinja2 template source code without sandboxing. This advisory tracks the root cause across all affected code...

Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Impact A Server-Side Template Injection SSTI vulnerability exists in multiple locations of trestle's Jinja2 rendering pipeline due to a systemic pattern: untrusted data is re-parsed as Jinja2 template source code without sandboxing. This advisory tracks the root cause across all affected code...

BIT-TOMCAT-2026-65182 Apache Tomcat: Bypass longest prefix security constraint

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1....

CVE-2026-54121

👻 CVE-2026-54121 — CertiGhost Elevazione dei privilegi in Active Directory Certificate Services AD CS 👋 Panoramica CVE-2026-54121 "Certighost" è una vulnerabilità di elevazione dei privilegi ad alta severità che colpisce Microsoft Active Directory Certificate Services AD CS. La vulnerabilità...

PRET

PRET - Printer Exploitation Toolkit Ist Ihr Drucker sicher? Überprüfen Sie es, bevor es jemand anderes tut... PRET ist ein neues Werkzeug für Druckersicherheitstests, das im Rahmen einer Masterarbeit an der Ruhr-Universität Bochum entwickelt wurde. Es verbindet sich über Netzwerk oder USB mit ein...

misp-dashboard

misp-dashboard Una dashboard che mostra dati in tempo reale e statistiche dai feed ZMQ di una o più istanze MISP. La dashboard può essere utilizzata come strumento di situational awareness in tempo reale per raccogliere informazioni sulle minacce. misp-dashboard include uno strumento di...

wig

wig - WebApp Information Gatherer wig è uno strumento di raccolta informazioni per applicazioni web, in grado di identificare numerosi Content Management System e altre applicazioni amministrative. Il fingerprinting dell'applicazione si basa su checksum e corrispondenza di stringhe di file noti p...

wp2shell

wp2shell Sfrutta la route confusion dell'API REST di WordPress CVE-2026-63030 + l'SQL injection CVE-2026-60137 nell'endpoint batch per ottenere l'esecuzione remota di codice. Vulnerabilità Route Confusion CVE-2026-63030 L'endpoint batch /batch/v1 dell'API REST di WordPress non isola correttamente...

slipstream

NAT Slipstreaming NAT Slipstreaming permette a un attaccante di accedere da remoto a qualsiasi servizio TCP/UDP associato a qualsiasi sistema dietro il NAT della vittima, bypassando il NAT/firewall della vittima controllo remoto arbitrario dei fori del firewall, semplicemente visitando un sito we...

GHSA-2VH6-HW4J-32WW gix-packetline: reachable panic on empty side-band packet (pre-auth network DoS)

Summary gix-packetline panics when it receives a side-band packet line that contains only the band-id byte with an empty payload. A malicious Git server - or any remote a victim clones/fetches from - can abort the gix client process during a normal fetch. This is a pre-authentication,...

gix-packetline: reachable panic on empty side-band packet (pre-auth network DoS)

Summary gix-packetline panics when it receives a side-band packet line that contains only the band-id byte with an empty payload. A malicious Git server - or any remote a victim clones/fetches from - can abort the gix client process during a normal fetch. This is a pre-authentication,...

htcap

HTCAP htcap ist ein Webanwendungs-Scanner, der in der Lage ist, Single-Page-Anwendungen SPA rekursiv zu durchsuchen, indem er Ajax-Aufrufe und DOM-änderungen abfängt. HAUPTFUNKTIONEN Rekursive DOM-Crawling-Engine Erkennt Ajax/Fetch/JSONP/WebSocket-Anfragen Unterstützt Cookies, Proxy,...

CVE-2026-29000

PoC de Bypass de Autenticação JWT/JWE Um script de prova de conceito PoC que demonstra uma vulnerabilidade de bypass de autenticação usando JSON Web Tokens JWT e JSON Web Encryption JWE. Esta ferramenta explora ambientes que validam incorretamente os algoritmos de token ao aceitar JWTs não...

meg

meg meg é uma ferramenta para buscar muitas URLs, mas ainda sendo 'educada' com os servidores. Pode ser usada para buscar muitos caminhos para muitos hosts; buscando um caminho para todos os hosts antes de passar para o próximo caminho e repetir. Você obtém muitos resultados rapidamente, mas nenh...

CVE-2026-41940

⚠️ CVE-2026-41940 - cPanel & WHM Authentifizierungsumgehung Kritische Pre-Authentifizierungsumgehung in cPanel & WHM 📌 Übersicht CVE-2026-41940 ist eine kritische Authentifizierungsumgehung -Schwachstelle, die cPanel & WHM und WP Squared betrifft. Ein nicht authentifizierter entfernter Angreifer...

GHSA-8JQH-95G6-7JPJ Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)

Summary Phalcon\Encryption\Crypt provides authenticated encryption: when useSigning is enabled the default, encrypt appends an HMAC tag and decrypt verifies it before returning the plaintext. The verification compares the attacker-supplied tag against the freshly computed HMAC using PHP/Zephir...

Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)

Summary Phalcon\Encryption\Crypt provides authenticated encryption: when useSigning is enabled the default, encrypt appends an HMAC tag and decrypt verifies it before returning the plaintext. The verification compares the attacker-supplied tag against the freshly computed HMAC using PHP/Zephir...

CVE-2026-54745

Kubeflow Pipelines prior to 2.17.0 is affected by an unauthenticated SSRF vulnerability in the frontend /_proxy/ route (proxy-middleware.ts). The _routePathWithReferer() function forwards an attacker-controlled HTTP/HTTPS origin to createProxyMiddleware without a host allowlist or filtering for l...

CVE-2026-54745 Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...

EUVD-2026-67790

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...