CVE-2026-120312

The Network-AI software (versions 5.13.4 before 5.15.5 ) is vulnerable to a path traversal vulnerability within the AgentVCR component. An attacker who can control the cassette name can inject traversal sequences into the load() or save() functions to read or write arbitrary .json files. This cou...

CVE-2026-120312 Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load or save to disclose sensitive JSON data or overwrite policy files suc...

CVE-2026-120312 Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load or save to disclose sensitive JSON data or overwrite policy files suc...

EUVD-2026-115001

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load or save to disclose sensitive JSON data or overwrite policy files suc...

CVE-2026-120312 Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load or save to disclose sensitive JSON data or overwrite policy files suc...

CVE-2026-120311 Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attackers to read or delete arbitrary .json files by supplying traversal sequences in the job id. Attackers controlling the id passed to FileJobStore.get, FileJobStore.delete, or JobQueue.getJ...

EUVD-2026-115000

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attackers to read or delete arbitrary .json files by supplying traversal sequences in the job id. Attackers controlling the id passed to FileJobStore.get, FileJobStore.delete, or JobQueue.getJ...

PT-2026-135258

Name of the Vulnerable Software and Affected Versions Network-AI versions 5.13.4 through 5.15.4 Description A path traversal issue exists in FileJobStore, enabling attackers to read or delete arbitrary .json files by using traversal sequences in the job identifier. By controlling the id passed to...

CVE-2026-120314: Jovancoding Network-AI: Network-AI from 5.14.0 before 5.15.5 contains a missing authentication vulnerability in the A2AServer class that allows…

Network-AI from 5.14.0 before 5.15.5 contains a missing authentication vulnerability in the A2AServer class that allows unauthenticated attackers to access task operations when no secret is configured. Attackers can send JSON-RPC requests to tasks/send, tasks/get, and tasks/cancel without a Beare...

PT-2026-135259

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load or save to disclose sensitive JSON data or overwrite policy files suc...

CentOS Linux 6 [TuxCare] Security Update: json-c / json-c-devel / json-c-doc (CENTOS6:CLSA-2026:1793271160)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793271160 advisory. - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. CVE-2020-12762...

PT-2026-135825

Name of the Vulnerable Software and Affected Versions AWS Serverless MCP Server versions prior to 0.2.1 Description Improper limitation of a pathname to a restricted directory in the deployment status component allows an actor who can influence the MCP agent to perform directory traversal. By...

PT-2026-135261

Network-AI from 5.14.0 before 5.15.5 contains a missing authentication vulnerability in the A2AServer class that allows unauthenticated attackers to access task operations when no secret is configured. Attackers can send JSON-RPC requests to tasks/send, tasks/get, and tasks/cancel without a Beare...

CVE-2026-120312: Jovancoding Network-AI: Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers…

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load or save to disclose sensitive JSON data or overwrite policy files suc...

CVE-2026-120311: Jovancoding Network-AI: Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attackers to…

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attackers to read or delete arbitrary .json files by supplying traversal sequences in the job id. Attackers controlling the id passed to FileJobStore.get, FileJobStore.delete, or JobQueue.getJ...

RustHound-CE

RustHound-CE is a cross-platform and cross-compiled BloodHound collector tool written in Rust, making it compatible with Linux, Windows, and macOS. It therefore generates all the JSON files that can be analyzed by BloodHound Community Edition. This version is only compatible with BloodHound...

CVE-2025-0868

Penetration Testing Project Report: Exploiting CVE-2025-0868 DocsGPT RCE via JSON Eval 1. Introduction A critical Remote Code Execution RCE flaw CVE-2025-0868 was disclosed on February 20, 2025, in the open-source DocsGPT library, caused by unsafe use of eval when parsing JSON payloads. Key...

Swagger-HTML-Injection-CVE-2025-8191

https://example.com/swagger/swagger.html?configURL=https://raw.githubusercontent.com/mayank-s16/Swagger-HTML-Injection-CVE-2025-8191/refs/heads/main/test.json...

CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026-30951 Sequelize ORM SQL Injection PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Overview CVE-2026-30951 is a SQL Injection vulnerability in Sequelize v6 , a widely used Node.js ORM. The vulnerabili...

ClaimJumper

/ | | | | | | | | | | | | | |/ | | ' \ | | | | | ' | ' \ / \ '| | || | | | | | | | | || | || | | | | | | | | / | ||,||| || ||/ |,|| || || ./ || |/ | | || v0.1.0 Professional JWT security testing toolkit. Analyze, crack, forge, and exploit JSON Web Tokens with 15+ vulnerability checks, 100k...