262225 matches found
PYSEC-2026-381 Langroid has a Code Injection vulnerability in TableChatAgent
Summary TableChatAgent uses pandas eval. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. PoC For example, one could prompt the Agent: Evaluate the following pandas expression on the data provided and print output:...
PYSEC-2026-358 InvokeAI Arbitrary File Deletion vulnerability
In invoke-ai/invokeai version v5.0.2, the web API POST /api/v1/images/delete is vulnerable to Arbitrary File Deletion. This vulnerability allows unauthorized attackers to delete arbitrary files on the server, potentially including critical or sensitive system files such as SSH keys, SQLite...
CVE-2026-57966
creationtimestamp| type| source ---|---|--- 2026-06-29 11:39:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfpcr2yi2n...
CVE-2026-57965
creationtimestamp| type| source ---|---|--- 2026-06-29 11:37:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfkxxaqx2d 2026-06-29 12:59:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgk53jybe2t...
UBUNTU-CVE-2026-57966
A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the guest operating system. This occurs because the filename provided by the SPICE host during file transfers is not properly sanitized...
CVE-2026-55603
A flaw was found in http-proxy-middleware. A remote attacker could exploit a vulnerability in the fixRequestBody function, which is used to re-emit a request body. By injecting carriage return and line feed characters \r\n into a request body key or value, an attacker can bypass security policies...
CVE-2026-13543
creationtimestamp| type| source ---|---|--- 2026-06-29 08:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg3umb4vk2y 2026-06-29 11:21:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgeo73rxb2b 2026-06-29 12:41:08+00:00| seen|...
CVE-2026-13538
creationtimestamp| type| source ---|---|--- 2026-06-29 08:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2qskonm2y 2026-06-29 19:50:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphb5bkz222g...
CVE-2026-57676
Summary: CVE-2026-57676 affects the WordPress plugin “Simple User Avatar” (versions up to and including 4.9). The issue is an Insecure Direct Object References (IDOR) /authorization bypass caused by an authorization check vulnerability tied to a user-controlled key, leading to insecure access due...
CVE-2026-54816
creationtimestamp| type| source ---|---|--- 2026-06-29 08:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpg2czqzdd2m...
CVE-2026-13595
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be...
CVE-2026-13539
creationtimestamp| type| source ---|---|--- 2026-06-29 07:55:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfz6rgc6q2y 2026-06-29 08:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpfzhmjhwp26 2026-06-29 10:53:23+00:00| seen|...
CVE-2017-0002
creationtimestamp| type| source ---|---|--- 2026-06-29 07:54:37+00:00| seen| https://gist.github.com/tu-trinh-scale/cb28617ddc3f6adf2b7f5da89706e0f7 2026-07-26 07:02:13+00:00| seen| https://t.me/KaitNews/2468 2026-07-27 00:01:51+00:00| seen| https://t.me/KaitNews/2468 2026-08-05 20:00:04+00:00|...
CVE-2026-57965
A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service DoS for the virtua...
flatpak: Flatpak: Arbitrary file deletion on host via improper cache file path validation
A flaw was found in Flatpak, a Linux application sandboxing and distribution framework. The caching mechanism for ld.so dynamic linker/loader improperly removes outdated cache files without adequately verifying that the application-controlled path to the outdated cache is within the designated...
EUVD-2026-40040
The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...
BIT-NODE-MIN-2026-48618
A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. This can lead to confidentiality impact or bypass of the intended security boundary under...
BIT-NODE-2026-48615
A flaw in Node.js proxy tunnel error handling could expose proxy credentials in ERRPROXYTUNNEL error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers. This vulnerability...