Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

Analisi degli Alert SOC: Lettura Arbitraria di File su Checkpoint Security Gateway CVE-2024-24919 Introduzione CVE-2024-24919 è una vulnerabilità zero-day critica nei Check Point Security Gateway che consente ad attaccanti remoti non autenticati di leggere file arbitrari dai sistemi interessati...

chaosblade

Chaosblade: un toolkit di chaos engineering facile da usare e potente Versione cinese README Wiki: DeepWiki 🔥🔥🔥 Aggiornamento importante: Chaosblade Agent rilasciato - Blade AI Blade AI funge da livello di agente intelligente nell'ecosistema ChaosBlade: a livello fondamentale, richiama ChaosBlade...

CVE-2026-52658

CVE-2026-52658 — XSS Memorizzato in AureusERP Monitoraggio Modifiche Chatter CWE-79 · CVSS 8.7 Alto · AureusERP ≤ v1.4.0 / master Chatter presenta i campi oldvalue / newvalue del monitoraggio delle modifiche come HTML grezzo !! !!, senza sanitizzazione. Un utente autenticato che modifica un recor...

ROOT-ZTE-X1001

ZTE Blade X1001 — Root con Magisk Android 15, Unisoc UMS9230 ⚠️ AVVISO: Effettuare il root di un dispositivo può invalidare la garanzia, causare un brick se eseguito in modo errato e cancellare tutti i dati. Procedi a tuo rischio. Questo repository ha esclusivamente scopo educativo. Indice...

CVE-2026-49436

LinkAce is a self-hosted archive to collect website links. Prior to version 2.5.7, the Bulk Link API endpoint POST /api/v2/bulk/links accepts URLs without any format validation, allowing an authenticated user to store a javascript: URI. The stored URI is later rendered verbatim as an href in Blad...

CVE-2026-49436

LinkAce (a self-hosted link archive) is vulnerable to stored XSS via its Bulk Link API endpoint (POST /api/v2/bulk/links). Prior to version 2.5.7 , the endpoint accepts URLs without format validation, allowing an authenticated user to store a javascript: URI. The stored URI is rendered verbatim a...

CVE-2026-49436 LinkAce vulnerable to stored XSS via 'javascript:' URI in Bulk Link API

LinkAce is a self-hosted archive to collect website links. Prior to version 2.5.7, the Bulk Link API endpoint POST /api/v2/bulk/links accepts URLs without any format validation, allowing an authenticated user to store a javascript: URI. The stored URI is later rendered verbatim as an href in Blad...

Laravel Backpack CRUD: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted

Summary The Blade template for the color column type src/resources/views/crud/columns/color.blade.php has its escaped/unescaped rendering branches inverted relative to every other column template in the library. Because $column'escaped' defaults to true, values stored in color columns are rendere...

PT-2026-79185

Name of the Vulnerable Software and Affected Versions LinkAce versions prior to 2.5.7 Description The Bulk Link API endpoint POST /api/v2/bulk/links lacks format validation for URLs, allowing authenticated users to store a javascript: URI. This URI is rendered verbatim as an href attribute in Bla...

CVE-2026-69118

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118

CVE-2026-69118 affects Cachet up to version 2.4.1. The vulnerability is a server-side template injection in incident template rendering that allows authenticated users to execute arbitrary PHP code, enabling remote code execution as the web server process. Attackers can craft malicious incident t...

CVE-2026-69118

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-71233

InvoiceNinja v5-stable renders an invoice or quote's "terms" field in the client portal using Laravel Blade's raw output directive !! $entity-terms !! resources/views/portal/ninja2020/invoices/includes/terms.blade.php with no HTML sanitization. StoreInvoiceRequest.php only strips newlines from th...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70593 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70593 Source advisory: OSV:GHSA-CJC9-Q5GF-327P...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70591 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70591 Source advisory: SNYK:JS-GHOST-18610058...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70591 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70591 Source advisory: OSV:GHSA-GCVV-72Q8-9V76...

CVE-2026-59232

Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows authenticated users holding the create or update lead permission to execute arbitrary JavaScript in the application origin via HTML markup stored in the lead name field, which the view renders through...

CVE-2026-59232

Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows authenticated users holding the create or update lead permission to execute arbitrary JavaScript in the application origin via HTML markup stored in the lead name field, which the view renders through...

EUVD-2026-51566

Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows authenticated users holding the create or update lead permission to execute arbitrary JavaScript in the application origin via HTML markup stored in the lead name field, which the view renders through...

CVE-2026-67595

VaahCMS versions 2.0.0–2.3.4 contain a malicious obfuscated JavaScript payload embedded in the security-otp.blade.php template used to render security OTP emails. The payload can run in any browser that renders the affected email with JavaScript enabled and establishes a WebSocket connection to a...