993615 matches found
CVE-2026-52831
CVE-2026-52831 affects Nuclio , a serverless framework for real-time events and data processing. In versions prior to 1.16.4 , the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container (/bin/sh, -c, ). Two fields in the...
CVE-2026-4802
CVE-2026-4802 - 通过 Cockpit 中的命令注入实现远程代码执行 针对 CVE-2026-4802 的概念验证漏洞利用程序，该漏洞为 Cockpit 系统日志界面（loadServiceFilters）中通过命令注入实现的远程代码执行。 环境搭建 构建并运行存在漏洞的环境： root@kitploit: $ docker build -t cockpit-vuln . $ docker run --rm -d --privileged -p 9090:9090 cockpit-vuln 使用方法 root@kitploit: 检查目标是否存在漏洞 $ python3...
CVE-2026-82404 TOON: Prototype pollution when decoding untrusted TOON input
TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a proto, constructor, or prototype key wrote through the object prototype chain instead of creating an own property, polluting Object.prototype for the runtime. In...
CVE-2026-82404 TOON: Prototype pollution when decoding untrusted TOON input
TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a proto, constructor, or prototype key wrote through the object prototype chain instead of creating an own property, polluting Object.prototype for the runtime. In...
SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit
= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X 重建分析 CVE-2026-21858：Ni8mare - n8n RCE 全链路利用 1. 执行摘要与概述 本文档对 CVE-2026-21858 漏洞（内部代号 Ni8mare）进行了确定性的技术重建分析。该漏洞的 CVSS 评分为 10.0（严重），存在于 n8n 自动化平台的 Form Webhook 节点中。该缺陷属于 Content-Type 混淆漏洞，可允许未经身份验证的攻击者执行任意文件读取、会话伪造，并最终通过"Execute...
CVE-2026-2441
CSS en Google Chrome antes de la Ejecución Remota de Código CVE-2026-2441 Resumen Se ha identificado una vulnerabilidad de gravedad ALTA, clasificada como CVE-2026-2441, categorizada bajo CWE-416, CWE-416, CVSS 8.8. Un use after free en CSS en Google Chrome anterior a 145.0.7632.75 permitía a un...
Rail-OT-Protector
⚠️ 仓库已归档 本仓库已归档 ，不再维护。 所有开发工作已迁移至统一的 ICS OT Protector 单体仓库： https://github.com/spinfosecurity/ics-ot-protector 该扫描器的位置 原仓库| 新位置 ---|--- Energy-Grid-Protector| scanners/energy-grid/ BAS-Guardian| scanners/bas/ Rail-OT-Protector| scanners/rail/ water-utility-protector| scanners/water/...
CVE-2026-84676
Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...
CVE-2026-84671
Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...
CVE-2026-84645
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...
EUVD-2026-70209
A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol SIP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This...
CVE-2026-20281 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability
A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol SIP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This...
EUVD-2026-70201
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...
CVE-2026-20212
CVE-2026-20212 affects the Silicon One Hardware Abstraction Layer (S1HAL) in Cisco Nexus 9000 Series Switches . The root cause is that TCP ports 43210 and 43211 are accessible in the default Layer 3 VRF, allowing an unauthenticated, remote attacker to send crafted input that executes code with ro...
CVE-2026-20212 Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...
CVE-2026-53611 Looking Glass: Remote Code Execution via Unanchored Regular Expression in BGPASPath Input Validation
Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...
CVE-2026-53611 Looking Glass: Remote Code Execution via Unanchored Regular Expression in BGPASPath Input Validation
Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...
redis-CVE-2025-49844
CVE-2025-49844 RediShell - 实验环境 一个用于测试和理解 Redis 中严重 CVE-2025-49844 RediShell 漏洞的实用实验环境。 ⚠️ 警告 本工具仅供教育用途！ 仅可在您拥有或获得明确测试许可的系统上使用 切勿暴露到互联网 切勿在生产环境中使用 关于该漏洞 CVE ID : CVE-2025-49844 名称 : RediShell CVSS 评分 : 10.0（严重） 类型 : Lua 解释器中的释放后使用（UAF） 影响 : 远程代码执行（RCE） 发现者 : Wiz Research Team 受影响版本 以下版本之前的所有 Redis...