51 matches found
GHSA-CC2G-26RW-G997 Duplicate Advisory: Craft CMS: Authenticated leak of secret environment variables
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-596p-6jv8-775v. This link is maintained to preserve external references. Original Description Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 interpolate environment variables and...
CVE-2026-72782
Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 interpolate environment variables and secrets via $ENVVAR strings in the elementId parameter into Twig templates before rendering, even when the Twig sandbox is enabled. An authenticated attacker with control panel access...
CVE-2026-72782
CVE-2026-72782 affects Craft CMS versions 5.0.0-RC1–before 5.10.6 and 4.0.0-RC1–before 4.18.2. The underlying issue is that environment variables and secrets (via ${ENV_VAR}) can be interpolated into Twig templates during rendering, even with the Twig sandbox enabled. An authenticated attacker wi...
CVE-2026-72782 Craft CMS 5.0.0-RC1 before 5.10.6 Environment Variable Leak
Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 interpolate environment variables and secrets via $ENVVAR strings in the elementId parameter into Twig templates before rendering, even when the Twig sandbox is enabled. An authenticated attacker with control panel access...
EUVD-2026-56106
Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 interpolate environment variables and secrets via $ENVVAR strings in the elementId parameter into Twig templates before rendering, even when the Twig sandbox is enabled. An authenticated attacker with control panel access...
CVE-2026-72782 Craft CMS 5.0.0-RC1 before 5.10.6 Environment Variable Leak
Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 interpolate environment variables and secrets via $ENVVAR strings in the elementId parameter into Twig templates before rendering, even when the Twig sandbox is enabled. An authenticated attacker with control panel access...
CVE-2026-72782 Craft CMS 5.0.0-RC1 before 5.10.6 Environment Variable Leak
Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 interpolate environment variables and secrets via $ENVVAR strings in the elementId parameter into Twig templates before rendering, even when the Twig sandbox is enabled. An authenticated attacker with control panel access...
SUSE SLES15 Security Update : podman (SUSE-SU-2026:3536-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3536-1 advisory. - CVE-2026-55686: specially crafted image where the WORKDIR path contains a symlink allows for directory creation and ownership...
PT-2026-69812
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An error handling path in the cfg80211 wext siwscan function contains a flaw where the creq variable leaks if the test against IEEE80211 MAX SSID LEN fails. Recommendations At the moment...
SUSE-SU-2026:3536-1 Security update for podman
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the WORKDIR path contains a symlink allows for directory creation and ownership modification on the host filesystem bsc1268579. - CVE-2026-57231: specially crafted image can trick podman run into...
CVE-2026-48039 Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.109, AuthInjectionMiddleware.dispatch at httpauthintegration.py:272 unconditionally forwards unauthenticated Streamable HTTP requests to downstream MCP tool handlers without issuing a 40...
PDF CVE-2024-12426 LibreOffice Expand URI
Generate PDF PoC for CVE-2024-12426: vnd.sun.star.expand URI leaks environment variables $HOME via LibreOffice on open. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.pdf.mixins import PdfCveMixin from lib.pdf.generators.viewercve import writelibreofficeexpanduri class...
AZL-91448 CVE-2026-57231 affecting package podman 5.6.1-10
Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk wi...
CVE-2026-57231 Podman: Malformed Image can trick podman run into leaking host environment variables into the container
Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk wi...
Environment Variable Leak
changedetection.io is vulnerable to Environment Variable Leak. The vulnerability is due to the use of the jq env builtin in include filter expressions, where an authenticated user can leak sensitive environment variables including SALTEDPASS, PLAYWRIGHTDRIVERURL, HTTPPROXY, and any secrets passed...
CVE-2026-33981
changedetection.io is a free open source web page change detection tool. Prior to 0.54.7, the jq: and jqraw: include filter expressions allow use of the jq env builtin, which reads all process environment variables and stores them as the watch snapshot. An authenticated user or unauthenticated us...
CVE-2025-27899 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environment variable that could aid in further attacks against the system...
PT-2026-78409
Name of the Vulnerable Software and Affected Versions Renovate versions 42.68.1 through 42.96.2 Renovate versions 42.68.1 through 43.4.3 renovate/renovate versions 13.3.0 through 13.5.9 mend/renovate-ce versions 13.3.0 through 13.5.9 renovate-ee-server versions 13.3.0 through 13.5.9...