Tag
Denial of Service Vulnerability in nltk PorterStemmer
4 TTPs 1 CVEAn algorithmic complexity vulnerability in the nltk PorterStemmer module allows unauthenticated attackers to cause high CPU usage via specially crafted inputs.
Authentication Bypass and Privilege Escalation in ArcadeDB
1 rule 5 TTPs 1 CVEArcadeDB versions before 26.8.1 contain a vulnerability in the gRPC transaction executor that allows authenticated readers to execute arbitrary JavaScript, leading to server-wide privilege escalation.
Arbitrary Code Execution in openssl_encrypt Library
1 rule 8 TTPs 1 CVEThe openssl_encrypt library before version 1.4.0 contains a vulnerability in its Whirlpool hash implementation that allows arbitrary code execution via untrusted shared object loading.
Access-Modifier Bypass in Scriban
3 TTPs 1 CVEScriban versions prior to 7.2.2 contain an access-modifier bypass in TypedObjectAccessor that allows unauthorized modification of private, internal, or init-only CLR object properties via template injection.
n8n Git Node Operations Bypass Sandbox Path Restriction
3 TTPsAn authenticated n8n user can exploit a path restriction bypass vulnerability within the Git node's fetch, pull, or push-tags operations to access arbitrary local Git repositories and their contents, potentially leading to sensitive data exposure.
Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`
2 TTPsA high-severity vulnerability, CVE-2026-49981, in the Twig templating engine allows for a sandbox bypass when the sandbox state changes between renders for a cached `Template` instance, enabling the execution of otherwise restricted filters, tags, and functions in sandboxed contexts.
npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining
1 rule 1 TTPA critical command injection vulnerability exists in the `npm:praisonai` package versions >= 1.2.3 and <= 1.7.1, where the `SandboxExecutor`'s `allowedCommands` policy is bypassed by allowing arbitrary shell command chaining after an allowlisted command, leading to remote code execution with the PraisonAI process privileges.
Twig Sandbox Bypass via Object Destructuring Assignment (CVE-2026-46639)
1 rule 1 TTPA vulnerability in Twig versions 3.24.0 to 3.26.0 (CVE-2026-46639) allows an attacker with write access to a sandboxed Twig template to bypass security policy restrictions by exploiting object-destructuring assignment to read any public property or invoke any public getter on objects passed to the template engine.
OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input
3 rules 1 TTPA sandbox bypass vulnerability exists due to the `dangerouslyDisableSandbox` parameter being exposed as part of the BashTool input schema, allowing an untrusted LLM to bypass the sandbox for any command and achieve host-level code execution due to the default `allowUnsandboxedCommands: true` setting.
JetBrains YouTrack RCE via Sandbox Bypass (CVE-2026-33392)
2 rules 1 TTP 1 CVEA high privileged user can achieve remote code execution via sandbox bypass in JetBrains YouTrack before version 2025.3.131383, identified as CVE-2026-33392, potentially leading to complete system compromise.
Vim Modeline Sandbox Bypass Vulnerability (CVE-2026-34982)
3 rules 1 TTP 1 CVE 1 IOCA critical vulnerability in Vim versions prior to 9.2.0276 allows arbitrary OS command execution via a crafted file that bypasses the modeline sandbox due to missing security checks, potentially leading to code execution.
OpenClaw Sandbox Bypass via Heartbeat Context Inheritance
2 rulesA critical vulnerability in the openclaw npm package (<=2026.3.28) allows a heartbeat context inheritance to bypass the sandbox via senderIsOwner escalation, patched in version 2026.3.31.