CVE-2021-39174-PoC

CVE-2021-39174-PoC Volcador de fuga de configuración de Cachet. PoC de CVE-2021-39174...

CVE-2021-39165

CVE-2021-39165 Este script de Python permite explotar automáticamente la CVE-2021-39165 en Cachet hasta la versión 2.3.18 inclusive. Referencias : https://github.com/fiveai/Cachet/security/advisories/GHSA-79mg-4w23-4fqc https://nvd.nist.gov/vuln/detail/CVE-2021-39165...

CVE-2021-39172-RCE

CVE-2021-39172 Cachet 2.4: Ejecución de código mediante inyección de configuración de Laravel publicación del blog sobre la vulnerabilidad https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ puedes usar esto para CTF o solo para aprender diviértete y que Dios l...

Cachet <=2.3.18 - SQL Injection

Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the SearchableTraitscopeSearch. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password and...

cachet

Cachet, the open source self-hosted status page system. Cachet 3.x Announcement For more information on the Cachet rebuild and our plans for 3.x, you can read the announcement here. Requirements PHP 8.3 or later Composer A supported database: MariaDB, MySQL, PostgreSQL or SQLite Installation,...

cachet_2.4.0-dev

CVE-2021-39174 Cachet 2.4.0-dev Un script de python3 para CVE-2021-39174 Cachet 2.4.0-dev: divulgación de información y RCE mediante inyección de plantillas Twig en el lado del servidor. Para el RCE se necesita la API KEY del usuario. Consulta el enlace de Leave Songs a continuación, que cubre có...

CVE-2026-69118

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118

CVE-2026-69118 affects Cachet up to version 2.4.1. The vulnerability is a server-side template injection in incident template rendering that allows authenticated users to execute arbitrary PHP code, enabling remote code execution as the web server process. Attackers can craft malicious incident t...

EUVD-2026-55800

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118 Cachet 2.4.1 Authenticated Server-Side Template Injection RCE

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118 Cachet 2.4.1 Authenticated Server-Side Template Injection RCE

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118 Cachet 2.4.1 Authenticated Server-Side Template Injection RCE

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

CVE-2026-69118: Improper Neutralization of Special Elements Used in a Template Engine

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...

EUVD-2021-1857

Malware in sbrugna...

Malicious code in @leaffm/leaf-connect-remi-cachet (npm)

The package @leaffm/leaf-connect-remi-cachet was found to contain malicious code...

MAL-2025-8399 Malicious code in @leaffm/leaf-connect-remi-cachet (npm)

The package @leaffm/leaf-connect-remi-cachet was found to contain malicious code...

CVE-2023-43661

Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch...

CVE-2021-39172

Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges User or Admin, can exploit a new line injection in the configuration edition feature e.g. mail settings and gain arbitrary code execution on the server. This issue was addresse...

CVE-2021-39174

Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges User or Admin, can leak the value of any configuration entry of the dotenv file, e.g. the application secret APPKEY and various passwords email, database, etc. This issue was...