356 matches found
wordlist_generator
wordlistgenerator Lo strumento wordlistgenerator genera una wordlist unica per il tuo target utilizzando le tecniche menzionate nel video di tomnomnom "Who, What, Where, When". Prende gli URL da gau per estrarre directory, nomi di file o parole dalle pagine. Come funzionalità aggiuntiva può...
CVE-2026-69263
CVE 2026-69263 Cosa CVE 2026-69263 è un bypass della patch che ad agosto 2025 aveva corretto la vecchia vulnerabilità RCE. La patch ha introdotto una denylist che bloccava l'installazione di pacchetti arbitrari. Come Poiché npm legge la configurazione dalle variabili d'ambiente, impostare la...
CVE-2026-81719
opensslencrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was compiled and executed in the host process at import time, before the runtime sandbox is installed. The...
CVE-2026-81701
opensslencrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation paths...
CVE-2026-81097
The executeruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach...
CVE-2026-81719
openssl_encrypt versions before 1.4.9 are vulnerable to arbitrary code execution via third-party plugins. The plugin signature policy defaulted to WARN , allowing unsigned or unverifiable non-built-in plugins to be compiled and executed in the host process at import time—before the runtime sandbo...
CVE-2026-81719 openssl_encrypt before 1.4.9 Remote Code Execution via Plugin
opensslencrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was compiled and executed in the host process at import time, before the runtime sandbox is installed. The...
CVE-2026-81701
openssl_encrypt versions before 1.4.9 contain an arbitrary code execution vulnerability in its plugin signature verification mechanism. The root cause is a denylist approach used to identify trusted built-in plugins: unsigned plugins placed in top-level plugins/ directories or unknown subdirector...
CVE-2026-81701 openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin
opensslencrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation paths...
CVE-2026-81701 openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin
opensslencrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation paths...
EUVD-2026-67057
opensslencrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation paths...
EUVD-2026-67025
The executeruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach...
CVE-2026-81097 rails-mcp-server 1.4.0 through 1.6.0 OS Command Execution via execute_ruby PTY Escape
The executeruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach...
CVE-2026-81097
rails-mcp-server (versions 1.4.0 through 1.6.0 ) contains an OS command execution vulnerability in the execute_ruby tool. The tool is documented as a read-only Ruby sandbox enforced by a pattern denylist and replacements for process-spawning methods on Kernel , but the pseudo-terminal library's s...
CVE-2026-81097 rails-mcp-server 1.4.0 through 1.6.0 OS Command Execution via execute_ruby PTY Escape
The executeruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach...
CVE-2026-81097 rails-mcp-server 1.4.0 through 1.6.0 OS Command Execution via execute_ruby PTY Escape
The executeruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach...
PT-2026-82602
openssl encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation path...
CVE-2023-43208
CVE-2023-43208 — Mirth Connect RCE Pre-Autenticazione Esecuzione remota di codice pre-autenticata in NextGen Healthcare Mirth Connect CVSS 9.8 Critico — Bypass della patch di CVE-2023-37679 Panoramica Mirth Connect utilizza la libreria Java XStream per deserializzare payload XML sull'endpoint...
DEBIAN-CVE-2026-78678
GitPython versions before 3.1.59 contain an incomplete denylist in the unsafegitrevisionoptions guard that omits --contents and -S options, allowing attackers to read arbitrary files by passing these options to Repo.blame. Attackers can supply revision values like --contents=/etc/passwd to leak...
CVE-2026-78678
GitPython versions before 3.1.59 contain an incomplete denylist in the unsafegitrevisionoptions guard that omits --contents and -S options, allowing attackers to read arbitrary files by passing these options to Repo.blame. Attackers can supply revision values like --contents=/etc/passwd to leak...