901 matches found
cve-2023-41993-test
original poc from po6ix post exploitation i copied from nikiasb's and Linus Henze's regexp exploits, 5aelo's Phrack paper/Pwn2Own 2018 exploit chain, LiveOverflow blog/youtube series...
waf-community-bypasses
WAF community bypasses Web Application Firewalls a.k.a. WAF are garbage. All the vendors, from the cheapest Cloudflare to "enterpise" like Imperva, Akamai, F5, Checkpoint, or Fortinet are just cheating with their customers by delivering 0 actual protection. 99.9% of WAF signatures are just RegExp...
CVE-2026-69083_exploit
CVE-2026-69083 — SiYuan Unauthenticated SQL Injection Unauthenticated SQL injection in SiYuan a Go-based knowledge-base app via the asset-content search endpoint. POST /api/search/fullTextSearchAssetContent builds a raw SQL statement by concatenating the user-controlled query value straight into ...
elastic-search-email-extractor
Email Extractor This Go program is designed to extract email addresses from a list of Elastic Search Databases. It takes in a list of URLs and will search the Database of each URL to find email addresses. Install go install github.com/RandomRobbieBF/elastic-search-email-extractor@latest Usage To...
TencentOS Server 4: emacs (TSSA-2026:1176)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1176 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CLSA-2026-1792291430 TuxCare security update for @babel/helper-create-regexp-features-plugin (1 CVE)
TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792291423 TuxCare security update for @babel/helper-create-regexp-features-plugin (2 CVEs)
TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792291422 TuxCare security update for @babel/helper-create-regexp-features-plugin (1 CVE)
TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792291421 TuxCare security update for @babel/helper-create-regexp-features-plugin (1 CVE)
TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
BIT-GOLANG-2026-97030 Recognize yield as regexp preceder keyword in html/template
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
Linux Distros Unpatched Vulnerability : CVE-2026-108976
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp- user-regexp has an incomplete list of disallowed inputs...
CVE-2026-108976
A flaw was found in Emacs. Processing a specially crafted filename with TRAMP can cause an OS command execution because tramp-user-regexp has an incomplete list of disallowed inputs. This vulnerability exists due to an incomplete fix of CVE-2026-79992. Mitigation To mitigate this vulnerability, d...
CLSA-2026-1791843328 TuxCare security update for path-to-regexp (2 CVEs)
TuxCare rebuilt path-to-regexp to address 2 CVEs. Fixed in 0.1.7-tuxcare.1...
CLSA-2026-1791833994 TuxCare security update for path-to-regexp (1 CVE)
TuxCare rebuilt path-to-regexp to address 1 CVE. Fixed in 0.1.10-tuxcare.2...
SUSE CVE-2026-108976
GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992...
AZL-107949 CVE-2026-108976 affecting package emacs 29.4-6
GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992...
CVE-2026-108976
GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992...
UBUNTU-CVE-2026-108976
GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992...
CVE-2026-108976
GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992...
CVE-2026-108976
GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992...