Lucene search
+L

574 matches found

Kitploit
Kitploit
added 2026/09/16 8:04 p.m.8 views

Mnemosyne

Mnemosyne 我的个人信息安全备忘录 趣闻 这个项目名称来源于希腊的记忆女神:Mnemosyne 。 另外,值得注意的是,这个词正是英文单词 memory 的词源。 用法 Mnemosyne 在我网站的同名子域名下公开可用。该站点通过 GitLab Pages 托管。你可以通过此链接访问。 在本地运行网站 要运行本网站,首先需要安装 Hugo。 然后,克隆我的仓库: root@kitploit: git clone https://gitlab.com/A1CY0N/mnemosyne.git 并用 Hugo 运行网站: root@kitploit: cd mnemosyne hu...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 8:27 p.m.9 views

kismet-docs

DEPRECATED This repo is now merged into the kismet-web-docs repo, and all future changes should go there. The new site engine uses Hugo, and a number of the documentation parts have been converted to YAML data with templates...

5.7AI score
SaveExploits0
NVD
NVD
added 2026/09/11 12:16 p.m.10 views

CVE-2026-89258

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS0.00315EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/11 12:16 p.m.10 views

CVE-2026-89259

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.8CVSS0.00411EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 12:16 p.m.3 views

UBUNTU-CVE-2026-89258

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS5.6AI score0.00315EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/09/11 12:16 p.m.11 views

CVE-2026-89258

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS5.6AI score0.00315EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/11 12:16 p.m.6 views

CVE-2026-89259

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.8CVSS5.5AI score0.00411EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/11 12:16 p.m.4 views

UBUNTU-CVE-2026-89259

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.8CVSS5.5AI score0.00411EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/11 11:15 a.m.38 views

CVE-2026-89259 Hugo before v0.165.0 Insufficient Permission Restriction via TailwindCSS

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.8CVSS0.00411EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/11 11:15 a.m.11 views

CVE-2026-89259

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.8CVSS5.5AI score0.00411EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/11 11:15 a.m.10 views

EUVD-2026-76071

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.8CVSS5.5AI score0.00411EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 11:15 a.m.9 views

CVE-2026-89259 Hugo before v0.165.0 Insufficient Permission Restriction via TailwindCSS

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

9.3CVSS5.5AI score
SaveExploits0References4
CVE
CVE
added 2026/09/11 11:15 a.m.26 views

CVE-2026-89259

Hugo , a static site generator, introduced Node's permission model in v0.161.0 to restrict tools executed during builds. However, TailwindCSS — present in the default security.exec.allow list — requires highly permissive flags (--allow-addons, --allow-child-process, --allow-worker), effectively b...

9.8CVSS5.5AI score0.00411EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/11 11:15 a.m.39 views

CVE-2026-89258 Hugo before v0.165.0 Symlink Confinement Bypass via resources.Get

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS0.00315EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/11 11:15 a.m.18 views

CVE-2026-89258

Hugo (static site generator) versions after v0.123.0 and before v0.165.0 are vulnerable to a symlink confinement bypass via direct resource lookups such as resources.Get and os.ReadFile. Symlinks in parent directories were not dropped during these lookups, allowing an attacker who can place a sym...

9.3CVSS5.6AI score0.00315EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/11 11:15 a.m.9 views

CVE-2026-89258 Hugo before v0.165.0 Symlink Confinement Bypass via resources.Get

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS5.6AI score0.00315EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 11:15 a.m.7 views

CVE-2026-89258 Hugo before v0.165.0 Symlink Confinement Bypass via resources.Get

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS5.5AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/09/11 11:15 a.m.13 views

CVE-2026-89258

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS5.6AI score0.00315EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/11 11:15 a.m.8 views

EUVD-2026-76070

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS5.6AI score0.00315EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-89259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS included in the default...

9.8CVSS5.5AI score0.00411EPSS
SaveExploits0References3
Rows per page
Query Builder