EUVD-2026-105172

ApostropheCMS: Missing Authentication in cleanExport Route...

Kerbeus-BOF

Kerbeus-BOF Beacon Object Files for Kerberos abuse. This is an implementation of some important features of the Rubeus project, written in C. The project features integration with the C2 frameworks Cobalt Strike, Havoc, AdaptixC2 and Outflank C2. Ticket requests and renewals asktgt The asktgt...

CVE-2026-113648

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API endpoint POST /api/v1/@apostrophecms/import-export/clean-export in @apostrophecms/import-export lacks authentication and authorization checks. Any client—including unauthenticate...

CVE-2026-113648 ApostropheCMS: Missing Authentication in `cleanExport` Route

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API endpoint POST /api/v1/@apostrophecms/import-export/clean-export in @apostrophecms/import-export lacks authentication and authorization checks. Any client—including unauthenticate...

CVE-2026-113648

The ApostropheCMS Node.js content management system contains a vulnerability in the @apostrophecms/import-export module prior to version 3.7.1 . The API endpoint POST /api/v1/@apostrophecms/import-export/clean-export lacks necessary authentication and authorization checks. This allows any client,...

PT-2026-118492

Name of the Vulnerable Software and Affected Versions ApostropheCMS import-export module versions prior to 3.7.1 Description The API endpoint 'POST /api/v1/@apostrophecms/import-export/clean-export' lacks authentication and authorization checks. This allows unauthenticated anonymous users with a...

RITM

RITM This is a Python implementation of the man-in-the-middle attack described by Charlie Clark @exploitph in his post, New Attack Paths? AS Requested Service Tickets, and demonstrated in his proof-of-concept, Roast in the Middle. In short, this tool: 1. Performs ARP spoofing between your targets...

PT-2026-114411

A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create req of the file python/sglang/srt/session/session controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: cachefiles: A consistency check has been added for copen/cread operations. This prevents malicious processes from executing random copen/cread requests, which could potentially crash the system. The added checks are as follows...

Astra Linux – Vulnerability in mbedtls

Mbed TLS versions prior to 3.6.4 allow a use-after-free in certain situations of applications developed in accordance with the documentation. The function mbedtlsx509stringtonames takes a head argument, which is documented as an output argument. The documentation does not indicate that the functi...

MAL-2026-17568 Malicious code in req-throttle-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in req-throttle-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

dothttp-req (>=0.0.43a14, <=0.0.43a17), dynamiq (>=0.5.2, <=0.11.1) potentially affected by CVE-2026-76825 via restrictedpython (7.1.0)

restrictedpython PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dothttp-req =0.0.43a14, =0.5.2, =0.11.1 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

blixa (1.1.4), dothttp-insomnia-importer (0.1.0) +3 more potentially affected by CVE-2026-76825 via restrictedpython (7.0.0)

restrictedpython PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - blixa 1.1.4 - dothttp-insomnia-importer 0.1.0 - dothttp-req =0.0.43a2, =0.0.5rc1, =0.8.5b2, =0.9.6b6 Source cves: CVE-2026-76825...

dothttp-req (>=0.0.43a19, <=0.0.43a20) potentially affected by CVE-2026-76825 via restrictedpython (7.2.0)

restrictedpython PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dothttp-req =0.0.43a19, =0.0.43a20 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

dektools (>=0.1.0, <=0.1.117), dothttp-req (>=0.0.41a1, <=0.0.42a1) potentially affected by CVE-2026-76825 via restrictedpython (5.2.0)

restrictedpython PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dektools =0.1.0, =0.0.41a1, =0.0.42a1 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.4) +15 more potentially affected by CVE-2026-76825 via restrictedpython (>=8.0.0, <=8.3.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.167.0 - pycurity 0.0.1 - pytest-canvas 0.1.0 and more Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

a2grunnerp (>=0.1.0, <=0.1.8), dothttp-req (>=0.0.42a3, <=0.0.42a10) +2 more potentially affected by CVE-2026-76825 via restrictedpython (6.0.0)

restrictedpython PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - a2grunnerp =0.1.0, =0.0.42a3, =2.10.0, =2025.9.5, =2025.12.1 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

CLEANSTART-2024-NJ43669 null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request)

Security vulnerability affects the heimdal package. A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ Ticket Granting Server - Request...

Rocky Linux 8 [CIQ] Security Update: 389-ds-base / 389-ds-base-debuginfo / 389-ds-base-debugsource / etc Multiple Vulnerabilities (crlsa-2024_4235)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244235 advisory. 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request CVE-2024-3657 389-ds-base: Malformed userPassword may cause crash at...