The Hacktron blog documents how the group was able to compromise the GNU Savannah forge and could have pushed malware into any of the projects hosted there.…

Vulnerabilities (CVE) LWN.net 31.10.2026, 15:00 Uhr 1 Min. Lesezeit TA0001 · T1190

BeitragSeite↗ Quelle (LWN.net)

The Hacktron blog documents how the group was able to compromise the GNU Savannah forge and could have pushed malware into any of the projects hosted there. Using Hacktron, we found that an email address like `touch${IFS}/tmp/savane-rce-proof`@attacker.example gave any registered user code execution on its backend. From there, we made our account... Weiterlesen: How We Could Have Backdoored Bash (Hacktron blog)

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege

MITRE ATT&CK Matrix Navigator

1 belegte Technik

T1190TA0001 · Initial Access

Exploit Public-Facing Application

Mitigation: M1042 Network Segmentation & WAF Rule Enforcement

Quelle: Kontext-Klassifikation des Artikeltextes

OpenVAS (GVM)ModSecurity Nuclei

Initial Access

CTI Threat Relationship Graph

Akteure · Techniken · Beziehungen

3 Knoten · 2 Relationen

CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC

🚀 Auf tsecurity.de entdecken

Intelligence Digest — free The top security news daily · unsubscribe anytime

Community Rating & Social Proof

⭐ Leser-Wertung

–

Ø / 5.0

No reader ratings yet

Was this page helpful?

🚀 Auf tsecurity.de entdecken

Related story clusters & sources (vector AI)

7 sources

CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600)

6 more sources

tsecurity.de10 min. agoCVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597) tsecurity.de10 min. agoCVE-2026-119089 | ThirstyAffiliates Plugin up to 3.12.1 on WordPress Comment Content comment cross site scripting (EUVD-2026-114598) tsecurity.de10 min. agoCVE-2026-116522 | comesio Relevanssi Plugin up to 4.28.5 on WordPress comment cross site scripting (EUVD-2026-114599) tsecurity.de10 min. agoCVE-2026-111592 | PublishPress Authors Plugin up to 4.17.0 on WordPress name cross site scripting (EUVD-2026-114646) tsecurity.de10 min. agoCVE-2026-116548 | e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.10 on WordPress optionals cross site scripting (EUVD-2026-114612) tsecurity.de10 min. agoCVE-2026-118070 | Welcart E-Commerce Plugin up to 2.12.5 on WordPress gid cross site scripting (EUVD-2026-114609)

↗ Open analysis

3 sources

CVE-2026-88942 | Woobewoo Product Filter for WooCommerce by WBW Plugin up to 3.4.6 on WordPress Setting getVar wpf_fid cross site scripting (EUVD-2026-114606)

2 more sources

tsecurity.de10 min. agoCVE-2026-107765 | marketingfire Discussion Board Plugin up to 2.6.0 on WordPress Output Escaping ctdb_filter_comment_author_name user_url cross site scripting (EUVD-2026-114602) tsecurity.de10 min. agoCVE-2026-119065 | arosoft Shipping Zones by Drawing for WooCommerce Plugin up to 3.3.0 on WordPress Checkout Field szbd_checkout_field_update_order_meta szbd-picked cross site scripting (EUVD-2026-114614)

↗ Open analysis