https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 18 Aug 2026 18:29:04 +0000 https://vulnerability.circl.lu/sighting/486c3a30-5dc6-43c4-b4ef-ecfee49e4582/export {"uuid": "486c3a30-5dc6-43c4-b4ef-ecfee49e4582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-m8mr-9hwf-7v3f", "type": "seen", "source": "https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da", "content": "# CVE's\n\n## Assigned CVE \n\n### SSTI \u2192 RCE via Mail Template Editor \n- https://github.com/tastyigniter/TastyIgniter/security/advisories/GHSA-743w-g9pf-8p94\n\n## Published - Pending CVE\n\n### Privilege escalation to root via unauthenticated/unauthorized plugin install task in Ajenti\n- https://github.com/ajenti/ajenti/security/advisories/GHSA-j8xf-5fw2-f99q\n\n### Authenticated argument injection in repo_url into git (any role)\n- https://github.com/jhd3197/ServerKit/security/advisories/GHSA-8vx6-432p-h62q\n\n### Git Deployments API Missing Authorization (Sensitive Log Exposure by Any Role)\n- https://github.com/jhd3197/ServerKit/security/advisories/GHSA-6w78-q5vm-rfmh\n\n### File Manager Exposes Panel Secrets (.env) to Low-Privileged Roles, Enabling Admin Session Forgery\n- https://github.com/jhd3197/ServerKit/security/advisories/GHSA-rm3m-9mvw-68fh\n\n## Triage \n\n### Stack-Name Path Traversal in Dockge Agent Socket Handlers\n- https://github.com/louislam/dockge/security/advisories/GHSA-qm8r-q3h4-c3vw\n\n### Symlink-Plant Chain: Arbitrary-Basename File Read\n- https://github.com/louislam/dockge/security/advisories/GHSA-jhg2-mvfw-xfpc\n\n### Server-Side Request Forgery via Agent Pairing\n- https://github.com/louislam/dockge/security/advisories/GHSA-m8mr-9hwf-7v3f\n\n### Malicious Agent: stack endpoint overwrite allows for root-privileged deploy via confused deputy\n- https://github.com/louislam/dockge/security/advisories/GHSA-mxcg-p696-rm94\n\n### Manager Trusts Agent-Supplied JSON Verbatim -> UI Data Spoofing + Open-Redirect / Reverse-Tabnabbing\n- https://github.com/louislam/dockge/security/advisories/GHSA-7jmf-5vcp-f672\n\n## Awaiting Action / Notification\n\n### Tiki Wiki CMS (Multple Vulnerabilities)\n\n### Caprover (Multiple Vulnerabilities)", "creation_timestamp": "2026-08-13T22:43:46.765755Z"} {"uuid": "486c3a30-5dc6-43c4-b4ef-ecfee49e4582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-m8mr-9hwf-7v3f", "type": "seen", "source": "https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da", "content": "# CVE's\n\n## Assigned CVE \n\n### SSTI \u2192 RCE via Mail Template Editor \n- https://github.com/tastyigniter/TastyIgniter/security/advisories/GHSA-743w-g9pf-8p94\n\n## Published - Pending CVE\n\n### Privilege escalation to root via unauthenticated/unauthorized plugin install task in Ajenti\n- https://github.com/ajenti/ajenti/security/advisories/GHSA-j8xf-5fw2-f99q\n\n### Authenticated argument injection in repo_url into git (any role)\n- https://github.com/jhd3197/ServerKit/security/advisories/GHSA-8vx6-432p-h62q\n\n### Git Deployments API Missing Authorization (Sensitive Log Exposure by Any Role)\n- https://github.com/jhd3197/ServerKit/security/advisories/GHSA-6w78-q5vm-rfmh\n\n### File Manager Exposes Panel Secrets (.env) to Low-Privileged Roles, Enabling Admin Session Forgery\n- https://github.com/jhd3197/ServerKit/security/advisories/GHSA-rm3m-9mvw-68fh\n\n## Triage \n\n### Stack-Name Path Traversal in Dockge Agent Socket Handlers\n- https://github.com/louislam/dockge/security/advisories/GHSA-qm8r-q3h4-c3vw\n\n### Symlink-Plant Chain: Arbitrary-Basename File Read\n- https://github.com/louislam/dockge/security/advisories/GHSA-jhg2-mvfw-xfpc\n\n### Server-Side Request Forgery via Agent Pairing\n- https://github.com/louislam/dockge/security/advisories/GHSA-m8mr-9hwf-7v3f\n\n### Malicious Agent: stack endpoint overwrite allows for root-privileged deploy via confused deputy\n- https://github.com/louislam/dockge/security/advisories/GHSA-mxcg-p696-rm94\n\n### Manager Trusts Agent-Supplied JSON Verbatim -> UI Data Spoofing + Open-Redirect / Reverse-Tabnabbing\n- https://github.com/louislam/dockge/security/advisories/GHSA-7jmf-5vcp-f672\n\n## Awaiting Action / Notification\n\n### Tiki Wiki CMS (Multple Vulnerabilities)\n\n### Caprover (Multiple Vulnerabilities)", "creation_timestamp": "2026-08-13T22:43:46.765755Z"} https://vulnerability.circl.lu/sighting/486c3a30-5dc6-43c4-b4ef-ecfee49e4582/export Thu, 13 Aug 2026 22:43:46 +0000