CVE-2026-85169 n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

CVE-2026-85169 n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

CVE-2026-85169

n8n versions before 1.123.73 , 2.35.4 , and 2.36.2 contain an expression sandbox escape in the $fromAI handler. The handler resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-pr...

CVE-2026-85168 n8n before 1.123.73 Remote Code Execution via Git Node

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-driver key families. A repository with...

EUVD-2026-70403

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-driver key families. A repository with...

CVE-2026-85168

n8n versions before 1.123.73 , 2.35.4 , and 2.36.2 are affected by a remote code execution vulnerability in the Git node . The root cause is that the node's sanitization logic reset a fixed list of command-bearing Git configuration keys but did not cover the content-filter and merge-driver key fa...

CVE-2026-85168 n8n before 1.123.73 Remote Code Execution via Git Node

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-driver key families. A repository with...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.57 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.57 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

BIT-ELASTICSEARCH-2026-72649 Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution

...

smb-ms17-010-pentest-report

SMB MS17-010 EternalBlue Penetration Test Report A lab-base...

gegl04 security update

An update is available for gegl04. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GEGL Generic Graphics Library is a graph-based image processing framework...

gegl security update

An update is available for gegl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GEGL Generic Graphics Library is a graph-based image processing framework...

EUVD-2026-70314

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible...

SmarterMail-CVE-2026-24423-

SmarterMail ConnectToHub RCE A Python-based exploit for CVE-2026-24423 , an unauthenticated Remote Code Execution vulnerability in SmarterTools SmarterMail's ConnectToHub functionality. Intended use: Authorized security testing, CTFs, Hack The Box labs, and controlled research environments only...

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit — Updated!

🔐 ReactRCE-Scanner CVE-2025-55182 — Advanced React Server Components RCE Exploit & Assessment Framework 📑 Table of Contents Legal Disclaimer & Ethical Notice Overview Key Capabilities Quick Start Guide Architecture & Feature Deep Dive Configuration Reference Automated Test Suite Remediation &...

PT-2026-85205

Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.8, from 9.0.0 before 9.0.8, all other EOL versions from 4.5.0. The vulnerability allows an unauthenticated user to get WHMCS customer's data via 2Checkout payment gateway's endpoi...

PT-2026-85286

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description Multiple buffer overflow issues exist in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched...

PT-2026-85288

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description A remote code execution issue exists in the SplitHandler::handlePreCheckSplitDir function of alogsplit. The software fails to sanitize shell metacharacters within log file pathnames, allowing...

PT-2026-85001

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.73 n8n versions prior to 2.35.4 n8n versions prior to 2.36.2 Description An expression sandbox escape exists in the $fromAI handler. The $fromAI handler resolved caller-supplied placeholder names without verifying i...