143 matches found
cve-2026-33067
CVE-2026-33017 — Langflow 未认证 RCE Nuclei 模板 用于检测 CVE-2026-33017 的 Nuclei 模板——这是 Langflow ≤ 1.8.2 中存在的一个未认证远程代码执行漏洞，可通过公共 flow 构建端点访问： root@kitploit: POST /api/v1/buildpublictmp/flowid/flow 存在漏洞的处理程序接受攻击者控制的 data 流程（flow）图，并在图构建期间将 data.nodes.data.node.template.code.value 直接传入 Python...
Crawl4AI <= 0.8.6 - Remote Code Execution
Crawl4AI through 0.8.6 ships a Docker API server that exposes an unauthenticated /crawl endpoint. The computed field type of JsonCssExtractionStrategy evaluates a user supplied expression inside an AST based sandbox that does not restrict attribute access on generator frame objects. A generator...
Orkes Conductor 3.21.21-3.30.1 - Remote Code Execution
Orkes Conductor from 3.21.21 before 3.30.2 is vulnerable to unauthenticated remote code execution. The INLINE workflow task evaluates a user-supplied JavaScript expression in a GraalVM context created with HostAccess.ALL, so an unauthenticated attacker can reflect from the bound input object to...
Flowise < 3.1.3 - Remote Code Execution
Flowise prior to 3.1.3 contains a remote code execution vulnerability caused by allowing authenticated users to set arbitrary TypeORM DataSource options including entities that load local JavaScript files, letting authenticated users execute arbitrary code on the server, exploit requires user...
GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQ...
CVE-2026-73678-PoC
CVE-2026-73678 — MindsDB Minds Platform 未认证 RCE（CVSS 10.0） CVSS 10.0（严重） · CWE-94 / CWE-306 · GHSA-jcxw-h8ph-pxpv · VulnCheck 摘要 Minds Platform（mindsdb/mindshub 的开源后端，先前为 mindsdb/minds-platform）暴露了 POST /api/v1/responses/（一个兼容 OpenAI 的 Responses API，端口 26866 ），完全没有认证 。没有任何认证中间件——没有 Bearer...
CVE-2023-22527
CVE-2023-22527 - Atlassian Confluence 远程代码执行 概述 CVE-2023-22527 是 Atlassian Confluence Data Center 和 Server 中的一个严重远程代码执行漏洞。该漏洞允许未经认证的攻击者通过特定端点中的模板注入，在易受攻击的 Confluence 实例上执行任意代码。 快速事实 CVE ID : CVE-2023-22527 CVSS 评分 : 10.0（严重） CVSS 向量 : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CWE :...
CVE-2025-49029
🚨 WordPress Custom Login And Signup Widget 插件 🔥 基础分数： 9.1（严重） CWE ID： CWE-94 – 生成代码的控制不当（'代码注入'） 🧠 描述 该插件允许管理员通过设置页面中的发件人名称 字段修改 sn.php 的内容。 用户提供的输入被直接写入 PHP 文件 ，未经清理或验证。 因此，在 text 参数中提供的任何PHP代码都将被存储到PHP文件中，并在直接请求时执行，导致远程代码执行（RCE） 。 📍 漏洞端点 root@kitploit:...
CVE-2026-21858
CVE-2026-21858 Piattaforma di Automazione dei Workflow n8n - Esecuzione di Codice Remota Uno strumento di ricerca sulla sicurezza per il rilevamento di CVE-2026-21858, una vulnerabilità critica di esecuzione di codice remota nella piattaforma di automazione dei workflow n8n. Indice dei Contenuti...
CVE-2026-76316
An unauthenticated remote attacker who can reach the Splunk management port can register a crafted Deployment Server client identifier, which is then inserted into dispatched searches without special-character sanitization. When an administrator opens the Add Data forwarder workflow, the injected...
Copier has a trust-prefix bypass via path traversal that runs tasks unprompted
Copier: trust-prefix bypass via path traversal runs tasks unprompted Summary In copier = 9.5.0, = 9.15.1, the trust setting's prefix match copier/settings.py compares the template URL against a trusted prefix with a raw str.startswith and no path normalization, while the URL is normalized when th...
GHSA-9GMC-JQMH-3RVM Copier has a trust-prefix bypass via path traversal that runs tasks unprompted
Copier: trust-prefix bypass via path traversal runs tasks unprompted Summary In copier = 9.5.0, = 9.15.1, the trust setting's prefix match copier/settings.py compares the template URL against a trusted prefix with a raw str.startswith and no path normalization, while the URL is normalized when th...
CVE-2026-67364
Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the...
CVE-2026-67364
Balbooa Forms for Joomla (versions
CVE-2026-67364 Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2
Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the...
CVE-2026-67364 Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2
Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the...
PT-2026-78353
Name of the Vulnerable Software and Affected Versions Balbooa Forms versions prior to 2.4.3.2 Description An unauthenticated attacker can perform PHP code injection due to the use of the eval function in the optional custom-PHP post-submission handler. The URL parameter = X shortcode is replaced...
Exploit for CVE-2026-73678
CVE-2026-73678 — MindsDB Minds Platform Unauthenticated RCE C...