Security Bulletin: Incomplete Security Scanner Blocklist Enables Network-Based Code Execution

Summary A security vulnerability was identified in the code security scanner where the DANGEROUSIMPORTS blocklist incompletely addressed network-based code execution risks. While subprocess module imports were correctly blocked, socket and urllib standard library modules were omitted from the...

EXPLOIT-CVE-2024-7804

CVE-2024-7804 — Deserialización insegura en PyTorch Distributed RPC RCE Laboratorio autocontenido + exploit para CVE-2024-7804 : ejecución remota de código en el framework RPC distribuido de PyTorch torch.distributed.rpc mediante deserialización insegura de datos no confiables CWE-502. Afectado:...

Important: Red Hat Security Advisory: ansible-core security update

An update for ansible-core is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...

mxc

Microsoft eXecution Container MXC MXC is a sandboxed code execution system for running untrusted code model output, plugins, tools on Windows, Linux, and macOS. It provides multiple containment backends — from OS-native process sandboxes to full VMs — behind a unified JSON configuration schema an...

CVE-2026-14986

An out-of-bounds write in the ITE it51xxx I2C driver in Zephyr RTOS (drivers/i2c/i2c_ite_it51xxx.c) occurs when the driver operates as an I2C target in buffer mode. The FIFO interrupt handler target_i2c_isr_fifo() copies host-supplied data into a fixed 256-byte buffer but performs its bounds chec...

CVE-2026-14986 Out-of-bounds write in it51xxx I2C target FIFO ISR on oversized write transaction

The ITE it51xxx I2C driver, when operating as an I2C target slave in buffer mode CONFIGI2CTARGET + CONFIGI2CTARGETBUFFERMODE, copies host-supplied write data into the fixed-size data-targetinbuffer inside its target FIFO interrupt handler targeti2cisrfifo in drivers/i2c/i2citeit51xxx.c. The copy...

Important: Red Hat Security Advisory: ansible-core security update

An update for ansible-core is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...

ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...

Important: Red Hat Security Advisory: ansible-core security update

An update for ansible-core is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

CVE-2025-55182-shellinteractive

CVE-2025-55182-shellinteractive Base utilizada de: https://github.com/Emiyelbarto/CVE-2025-55182-PoC Muchas gracias por la gran contribución. Descripción general CVE-2025-55182 es una vulnerabilidad de deserialización en Next.js/React Server Components que permite a atacantes remotos no...

CVE-2026-9277

CVE-2026-9277 - Exploit de Inyección de Comandos en Shell-Quote Un script de exploit Proof of Concept PoC especializado diseñado para verificar y demostrar CVE-2026-9277 , una vulnerabilidad estructural de inyección de comandos encontrada en versiones heredadas de la librería shell-quote = 1.8.3...

CVE-2025-47227

CVE-2025-47227 Exploit para CVE-2025-47227 - Restablecimiento de contraseña de ScriptCase Pre-Auth CVE-2025-47227 es una omisión de autenticación pre-auth CVSS 9.8 en el entorno de producción de ScriptCase ≤ 9.12.006. El endpoint login.php permite restablecer la contraseña del administrador sin...

CVE-2025-69212

CVE-2025-69212 描述 OpenSTAManager 是一款用于技术支持、电子发票和会计的管理软件解决方案。版本 =2.9.8 存在一个经过身份验证的远程代码执行漏洞。攻击者可以通过上传一个特制的包含 .p7m 文件的 .zip 压缩包来利用此漏洞，该 .p7m 文件的文件名可被解释为 shell 命令，从而导致在远程服务器上执行任意命令。 用法 要求 root@kitploit: $ pip install requests 概念验证用法 root@kitploit: $ python3 exploit.py -h --user USER --password PASSWO...

CVE-2026-27966

CVE-2026-27966 — Escáner de Ejecución Remota de Código Langflow Inyección de Ruta Previo a Autenticación + Inyección de Vértice → Ejecución de Código Python Descripción general CVE-2026-27966 es una vulnerabilidad de ejecución remota de código previa a la autenticación de gravedad crítica CVSS 9....

CVE-2026-12944

IBM Langflow OSS 1.0.0 through 1.10.0 contains a vulnerability in its code security scanner where the DANGEROUS_IMPORTS blocklist correctly blocked subprocess but omitted the socket and urllib standard library modules. This allowed authenticated users to submit components containing socket.connec...

CVE-2026-12944 Incomplete Security Scanner Blocklist Enables Network-Based Code Execution

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...

CVE-2026-12944 Incomplete Security Scanner Blocklist Enables Network-Based Code Execution

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...

CVE-2026-68489

A flaw was found in Plesk extensions Ruby and Node.js Toolkit. This static code injection vulnerability allows remote authenticated users to execute arbitrary code as root. The flaw is triggered by manipulating custom environment variables, leading to a complete compromise of the affected system...