Langflow 安全漏洞

Langflow is a visualization framework for building multi-agent and RAG applications open-sourced by Langflow. A security vulnerability exists in Langflow that stems from improper management of permissions within a container, which could lead to elevation of privilege...

Linux Distros Unpatched Vulnerability : CVE-2018-19516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv=REFRESH...

Linux Distros Unpatched Vulnerability : CVE-2018-4232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTun...

Linux Distros Unpatched Vulnerability : CVE-2016-7587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before...

Linux Distros Unpatched Vulnerability : CVE-2022-23537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN,...

Linux Distros Unpatched Vulnerability : CVE-2018-3209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE component of Oracle Java SE subcomponent: JavaFX. The supported version that is affected is Java SE: 8u182. Difficult to exploit...

Linux Distros Unpatched Vulnerability : CVE-2024-21217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported...

Optimizing Scalar Selection in Elliptic Curve Cryptography Using Differential Evolution for Enhanced Security

Elliptic Curve Cryptography ECC is a fundamental component of modern public-key cryptosystems that enable efficient and secure digital signatures, key exchanges, and encryption. Its core operation, scalar multiplication, denoted as $k \cdot P$, where $P$ is a base point and $k$ is a private scala...

CVE-2025-9096

A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

Consiglieres in the Shadow: Understanding the Use of Uncensored Large Language Models in Cybercrimes

The advancement of AI technologies, particularly Large Language Models LLMs, has transformed computing while introducing new security and privacy risks. Prior research shows that cybercriminals are increasingly leveraging uncensored LLMs ULLMs as backends for malicious services. Understanding the...

Malicious code in applications.services.devcloud.image-search-client (npm)

The package applications.services.devcloud.image-search-client was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-14727 Malicious code in applications.services.devcloud.image-search-client (npm)

The package applications.services.devcloud.image-search-client was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-38581 Malicious code in voltron-applications (npm)

The package voltron-applications was found to contain malicious code...

Malicious code in voltron-applications (npm)

The package voltron-applications was found to contain malicious code...

CVE-2025-30027

An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...

CVE-2025-3892

ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

The vulnerability of the Personalization component of the Oracle Applications Framework allows a perpetrator to gain unauthorized access to modify, read, and delete protected information.

The vulnerability of the Personalization component of the Oracle Applications Framework is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to modify, read, and delete protected information usi...

The vulnerability of the Web Utilities component of the Oracle Applications Framework software platform allows a perpetrator to gain unauthorized access to modify, read, and delete protected information.

The vulnerability of the Web Utilities component of the Oracle Applications Framework is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to modify, read, and delete protected information using the HTTP protoc...

CVE-2025-53725 Windows Push Notifications Apps Elevation of Privilege Vulnerability

...

CVE-2024-41984

CVE-2024-41984 affects SmartClient modules Opcenter QL Home, SOA Audit, and SOA Cockpit (SC) with versions 13.2–2505. The root cause is improper error handling when accessing an inaccessible resource, which can expose system applications. Affected products expose limited information due to error ...