CVE-2026-45770

Suricata versions 8.0.0 through 8.0.5 (exclusive) are affected by a Lua sandbox bypass. A Lua rule that registers an excessive number of flow variables can corrupt Lua detection state , potentially escaping Suricata's restricted Lua sandbox. The attack requires a crafted Lua script/rule to be loa...

CVE-2026-81941

IBM Langflow OSS versions 1.0.0 through 1.11.5 are vulnerable to arbitrary operating system command execution when an authenticated non-administrative user constructs a flow with an MCP Tools component configured to use a local stdio subprocess transport. This bypasses both the LANGFLOW_CUSTOM_CO...

CVE-2026-81268

IBM Langflow OSS 1.0.0–1.11.5 is vulnerable to authentication bypass and insufficient session expiration due to two distinct flaws. First, MCP HTTP API credential resolvers fail to apply the AUTO_LOGIN API-key guard that standard endpoints enforce, causing unauthenticated requests to MCP endpoint...

CVE-2026-45767

Suricata (network IDS/IPS/NSM engine) versions prior to 7.0.16 and 8.0.5 contain a vulnerability in the datasets feature where the save command's protection against absolute filenames can be bypassed when combined with the load command. A malicious rule could potentially overwrite any file on the...

CVE-2026-82107

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains multiple vulnerabilities stemming from bundled open-source software. The primary described issue is improper authentication , which allows a remote authenticated attacker to obtain sensitive information and bypass security restrictions. The ass...

NPM: n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution

NPM: n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution vulnerability discovered by ? in WordPress Npm n8n versions 2.37.7...

CVE-2026-9176

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerability to escalate privileges and gain unauthorized access to protected resources...

CVE-2026-63427

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...

n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...

NPM: n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

NPM: n8n: Git Node branch..remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...

EUVD-2026-74270

n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check...

EUVD-2026-74272

n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions...

EUVD-2026-74276

n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open...

PackMyPayload

PackMyPayload - Amenaza emergente de malware contenerizado Ir a formatos compatibles Esta herramienta toma un archivo o directorio como entrada y los incrusta en un archivo de salida que actúa como un archivo/contenedor. Puede servir como Prueba de Concepto para presentar el riesgo emergente de...

rsfiles-CVE-2026-57827

CVE-2026-57827 — RSFiles! Unauthenticated File Upload → RCE Disclaimer — authorized use only. This is a proof-of-concept for security research and defensive testing. You are responsible for using it only on systems you own or have explicit written permission to test. Misuse against third parties...

EUVD-2026-74269

n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter...

evilginx2

Evilginx 3.0 Evilginx es un framework de ataque de intermediario man-in-the-middle utilizado para el phishing de credenciales de inicio de sesión junto con cookies de sesión, lo que permite eludir la protección de autenticación de dos factores. Esta herramienta es la sucesora de Evilginx, lanzada...

CVE-2026-63427

An authentication bypass vulnerability in Lenovo Software Fix allows a local authenticated user with low privileges to achieve arbitrary code execution with elevated privileges . The attack vector is local with low complexity and no user interaction required, yielding HIGH impact across confident...

TREVORspray

TREVORspray 2.0 TREVORspray es un rociador de contraseñas modular con hilos, proxy SSH, módulos de botín y más. Por @thetechr0mancer Instalación: root@kitploit: pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install git+https://github.com/blacklanternsecurity/trevorspray...

shouganaiyo-loader

shouganaiyo-loader: Forced Entry for Java Agents shouganaiyo-loader is a cross-platform Frida-based Node.js command-line tool that forces Java processes to load a Java/JVMTI agent regardless of whether or not the JVM has disabled the agent attach API. Install root@kitploit: $ sudo npm install -g...