CVE-2026-42533

CVE-2026-42533 — seguimiento del clobbering de capturas map/regex de nginx Fuente para el rastreador del estado del parche de CVE-2026-42533: un sitio de una sola página que registra qué distribuciones han publicado una corrección para el desbordamiento de heap por clobbering de capturas map/rege...

Nuclei: Environment variable disclosure via Response-Derived DSL Expressions

A vulnerability in Nuclei's expression evaluation engine makes it possible for a malicious target server to inject and execute supported DSL expressions. This happens when HTTP response data containing helper/function syntax gets reused by multi-step templates. If the -env-vars / -ev option is...

PT-2026-34612

Name of the Vulnerable Software and Affected Versions Nuclei versions 3.0.0 through 3.7.9 Description A flaw in the expression evaluation engine allows a malicious target server to inject and execute supported Domain Specific Language DSL expressions. This occurs when HTTP response data containin...