Linux Distros Unpatched Vulnerability : CVE-2026-79131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...

Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-

Triage: CVE-2021-26855 ProxyLogon - Microsoft Exchange Per questo laboratorio, l'obiettivo era esercitarsi nel triage di una vulnerabilità reale e nota, come farebbe un team di sicurezza: leggere i dettagli della CVE, comprendere il punteggio CVSS e ragionare su quanto sia effettivamente rischios...

CVE-2021-43503

Avviso La vulnerabilità è stata revocata Override Questo riguarda CVE-2021-43503, non sono riuscito a replicare questa vulnerabilità attraverso exp Requisiti PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c...

CVE-2022-22947-POC

Spring-Cloud-Gateway-CVE-2022-22947 Avviso di sicurezza per la vulnerabilità di esecuzione remota di codice in Spring Cloud Gateway. Questa vulnerabilità si verifica quando Spring Cloud Gateway abilita ed espone l'endpoint Gateway Actuator: le applicazioni che utilizzano Spring Cloud Gateway...

CVE-2026-41089

CVE-2026-41089 root@kitploit: ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════...

CVE-2023-44760_ConcreteCMS-Stored-XSS---TrackingCodes

ConcreteCMS Stored XSS v.9.2.1 Autore: Sergio Descrizione: Vulnerabilità di Cross Site Scripting multipla in ConcreteCMS v.9.2.1 permette a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente creato nei Codici di tracciamento dell'intestazione e del piè di pagina d...

CVE-2023-43878-RiteCMS-Stored-XSS---MainMenu

Rite CMS v3.0 XSS Memorizzato Multiplo Autore: Sergio Descrizione: Rite CMS 3.0 è affetto da una vulnerabilità di Cross-Site scripting XSS memorizzato multiplo che consente agli attaccanti di eseguire codice arbitrario tramite un payload appositamente creato nel menu principale - Elementi nel men...

CVE-2022-30190

Exploitation von Follina CVE-2022-30190 Follina CVE-2022-30190 ist eine kritische Schwachstelle zur Remote-Code-Ausführung RCE, die das Microsoft Support Diagnostic Tool MSDT betrifft. Dieser Fehler wurde ursprünglich über eine bösartige Datei entdeckt, die auf VirusTotal gefunden wurde, und vom...

CVE-2021-44228

🛡️ CVE-2021-44228: Análise do Log4Shell - A Vulnerabilidade que Revolucionou a Segurança Java Impacto Crítico CVSS 10.0 | Descoberta em 2021, esta falha no Apache Log4j permite execução remota de código RCE e afeta milhões de sistemas globalmente. Ainda hoje, é um lembrete chave para a...

CVE-2023-41436-CSZ-CMS-Stored-XSS---Pages-Content

CSZ CMS XSS Memorizzato v1.3.0 Autore: Sergio CVE: 2023-41436 Descrizione: La vulnerabilità di Cross Site Scripting in CSZCMS v.1.3.0 consente a un utente malintenzionato locale di eseguire codice arbitrario tramite uno script appositamente predisposto nel parametro Additional Meta Tag nel...

Malicious code in hydration-ui-cls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dab60d6a779e65d7fa94af8c036d86b722a9cfddbe12d637990251a35004356 On import, dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-eng.dat to 0755 and spawns it detached via childprocess.spawn. T...

MAL-2026-14517 Malicious code in hydration-ui-cls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dab60d6a779e65d7fa94af8c036d86b722a9cfddbe12d637990251a35004356 On import, dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-eng.dat to 0755 and spawns it detached via childprocess.spawn. T...

CVE-2023-30547

CVE-2023-30547 vm2 è un sandbox che può eseguire codice non fidato con moduli built-in di Node whitelistati. Esiste una vulnerabilità nella sanificazione delle eccezioni di vm2 per le versioni fino alla 3.9.16, che consente agli attaccanti di sollevare un'eccezione host non sanificata all'interno...

CVE-2026-57170

compliance-trestle (Trestle), a Python SDK for managing OSCAL compliance documents, is vulnerable to server-side template injection in versions prior to 3.12.4 and 4.0.0 through 4.0.3. The custom Jinja2 include tags (mdsection_include and md_clean_include) re-parse included Markdown file content ...

CVE-2026-57170 Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions prior to 3.12.4 and 4.0.0 through 4.0.3, the custom Jinja2 include tags mdsectioninclude and mdcleaninclude re-parse the content of an included Markdown file as Jinja2 template co...

CVE-2026-54757

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...

RCE-Exploit-Bolt-3.7.0-CVE-2020-4040-4041

इस रिपॉजिटरी में README नहीं है।...

CVE-2026-54757 Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...

CVE-2026-54757

Compliance-trestle (Trestle) , a Python SDK and CLI for managing OSCAL compliance documents, is vulnerable to server-side template injection (SSTI) leading to remote code execution . The root cause is that the MDCleanInclude and MDSectionInclude Jinja2 tags re-parse untrusted Markdown content as ...

CVE-2026-54757 Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...