123053 matches found
PT-2026-60116
n8n before 2.19.3 contains a file path restriction bypass in the legacy ExecuteWorkflow node's localFile source option, which reads workflow files from disk without the file-access checks enforced by other file-reading nodes. Although hidden from the UI since v1.2, it remains reachable via the RE...
CVE-2025-65720: Improper Neutralization of Special Elements used in a Command
An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...
CVE-2026-42533: Heap-based Buffer Overflow
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
CVE-2026-42533: Heap-based Buffer Overflow
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
PT-2026-60262
Name of the Vulnerable Software and Affected Versions jsii-diff versions prior to 1.131.0 Description An OS command injection flaw exists in the npm package loading component. Context-dependent attackers can execute arbitrary commands by providing crafted package specifiers through the npm: sourc...
PT-2026-60309
Name of the Vulnerable Software and Affected Versions GPT Researcher version 3.3.7 Description An issue allows attackers to execute arbitrary commands on a victim system through command injection. This occurs when a user interacts with a specially crafted HTML page, and no authentication is...
CVE-2025-65720
An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...
PT-2026-60366
Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 5.31.7 Description On Linux, the networkInterfaces function is susceptible to OS command injection. The issue occurs when the library processes the Debian/Ubuntu interfaces5 source directive. Specifically, t...
PT-2026-60387
Name of the Vulnerable Software and Affected Versions OpenFeature Operator versions prior to 0.9.3 Description On multi-tenant clusters using namespaces as trust boundaries, a tenant capable of creating a controller-owned workload can reference a FeatureFlagSource or InProcessConfiguration in a...
CVE-2025-65720
An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...
CVE-2026-56434: Use After Free
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...
CVE-2026-61433: Improper Control of Generation of Code
PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressions through the deploy.api.host and agentsfile configuration parameters that execute when the generated server starts or...
CVE-2026-60005: Use of Uninitialized Resource
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...
CVE-2026-60005: Use of Uninitialized Resource
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...
CVE-2026-56434: Use After Free
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...
CVE-2026-54684
creationtimestamp| type| source ---|---|--- 2026-07-14 23:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfxhbupl25 2026-07-27 09:01:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmjv6zbsa27 2026-07-27 09:01:06+00:00| seen|...
CVE-2026-36035
creationtimestamp| type| source ---|---|--- 2026-07-14 23:54:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfqvwm4q27 2026-07-27 09:05:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmk5mowaa27...
CVE-2026-5269
creationtimestamp| type| source ---|---|--- 2026-07-14 23:52:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfnw7qtt2i 2026-07-15 15:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2wcttif2y 2026-07-27 08:46:18+00:00| seen|...
CVE-2025-56362
creationtimestamp| type| source ---|---|--- 2026-07-14 23:49:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfifeijg24 2026-07-27 09:09:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkejrkej2p...
CVE-2026-15769
creationtimestamp| type| source ---|---|--- 2026-07-14 23:43:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnf5nd2jx2e 2026-07-16 04:45:18+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-17 21:37:06+00:00| seen|...