CVE-2026-26720-Twenty-RCE

Twenty CRM - Authenticated Remote Code Execution RCE Overview Product: Twenty CRM Vulnerability: Remote Code Execution RCE via Serverless Workflow Functions Severity: Critical Affected Component: Workflow Automation Code - Serverless Function Tested Version: v1.15.0 This repository documents a...

CVE-2025-52385

CVE-2025-52385 Software : Studio 3T v.2025.1.0 Vulnerability Report : Studio 3T Remote Command Execution Overview A critical vulnerability in Studio 3T version 2025.1.0 and earlier allows a remote attacker to execute arbitrary code via a crafted payload exploiting the childprocess module in the...

JSONata lookup() function Code Execution

The vulnerability of the lookup function in the childprocess module of the json-data transformation software JSONata is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

CVE-2025-52385: Improper Control of Generation of Code

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

Netease open source Pomelo game server framework is not authorized to access leads to remote command execution

Pomelo is a piece of Netease open source based on Node.js the game server framework, which is based on Node.js high-performance, distributed game server framework. It includes the basis of the development framework and the associated expansion components, libraries and tools packages, can help sa...