CVE-2026-81662 Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys

Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines in conf/configmodule.py. The vulnerabl...

CVE-2026-81662

Flowintel (versions ≥3.3.0 ) is vulnerable to Remote Code Execution via its alerts settings update endpoint. The root cause is improper handling of requester-supplied configuration keys: while values were normalized to Python literals, the keys themselves were injected directly into the source of...

EUVD-2026-66997

Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines in conf/configmodule.py. The vulnerabl...

CVE-2026-81662 Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys

Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines in conf/configmodule.py. The vulnerabl...

CVE-2026-10170-RCE

Visitor Management System 1.0 – SQLi zu Remote Code Execution Angriffskette Schwachstelleninformationen...

c-copy-fail

CopyFail CVE-2026-31431 nell'API Crypto del kernel Linux Risorse: sito principale syscalls aarch64 https://arm64.syscall.sh/ pwntools per generare shell code come funzionano i dati ancillari in sendmsg...

cve-2026-41940-tool

🚀 CVE-2026-41940 – Strumento di Sfruttamento del Bypass di Autenticazione cPanel & WHM / WP Squared Un'utility Python completa per rilevare , scansionare in massa e sfruttare la vulnerabilità critica di bypass dell'autenticazione CVE-2026-41940 in cPanel & WHM e WP Squared. Lo strumento combina...

CVE-2026-41900-POC

OpenLearnX-RCE OpenLearnX RCE non autenticata tramite montaggio di volume del container Scoperta basata su diff → Patch silenziosa → Evasione sandbox → Divulgazione completa di /tmp...

CVE-2026-21514_CVE-2026-21510

CVE-2026-21514 & CVE-2026-21510 Builders 1; CVE-2026-21514 SBX-Bypass oder Protected-View-Bypass Dokumentpaket mit verschleiertem Pfad zu WindowsUpdateDiagnostic.xml in word/rels/webSettings.xml.rels neu erstellen Ausstehend Andere XML-Konfigurationen im Pfad C:\Windows\diagnostics\index prüfen, ...

CVE-2026-56705

CVE-2026-56705: Adminer 5.4.3 — RCE non autenticato tramite iniezione DSN PDO MSSQL...

CVE-2026-58073-check

Script di rilevamento dello stato di patch per l'impersonificazione dell'agente di Veeam Service Provider Console Un rilevatore sicuro e non autenticato per le vulnerabilità KB4893 in Veeam Service Provider Console pubblicato il 04-08-2026. Risponde a una domanda per ogni target, prima di qualsia...

CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - RCE via pullrequesttarget Injection → Supply Chain Compromise Entdeckt und gemeldet von: Astaruf Vollständiger Bericht: https://nstsec.com/en/posts/sherlock-rce-pull-request-target-cve-2026-44590/ Upstream-Advisory: sherlock-project/sherlock GHSA...

Research-CVE-2026-21858

CVE-2026-21858 Ni8mare: Bypass dell'autenticazione ed esecuzione remota di codice in n8n 1. Panoramica della vulnerabilità Nome: Ni8mare ID CVE: CVE-2026-21858 Punteggio CVSS: 10.0 Critico Tipo di vulnerabilità: Bypass dell'autenticazione, Inclusione locale di file LFI, Esecuzione remota di codic...

CVE-2026-42778-POC

CVE-2026-42778 Übersicht Unvollständiger Fix in der Methode AbstractIoBuffer.getObject von Apache MINA. Die Allowlist-Validierung des Klassennamens, die einschränkt, welche Klassen deserialisiert werden können, wird zu spät angewendet – nachdem statische Initialisierer in den gelesenen Klassen...

cve-2026-39440-funnelforms-fix

Fix per CVE-2026-39440 FunnelForms Un plugin WordPress drop-in che blocca il gestore Demo Import vulnerabile in FunnelForms Pro ≤ 3.8.1 per mitigare l'esecuzione remota di codice CVE-2026-39440, CVSS 9.9. La vulnerabilità...

CVE-2025-60749

CVE-2025-60749 Vulnerabilità di DLL Hijacking in SketchUp Desktop 2025...

CVE-2026-5027

CVE-2026-5027 - Langflow Path Traversal zu Remote Code Execution Beschreibung Langflow-Versionen bis einschließlich 1.8.4 bereinigen den Parameter filename im Endpunkt POST /api/v2/files nicht. Ein Angreifer kann Pfad-Traversal-Sequenzen ../ verwenden, um Dateien an beliebige Stellen im Dateisyst...

CVE-2026-25053

CVE-2026-25053 Leggi: https://yadhu.in/2026/02/09/Breaking-Down-the-n8n-Git-Node-Vulnerability-CVE-2026-25053-Remote-Code-Execution/...

CVE-2026-32662

CERT/CC VU653116 | Avviso CISA ICSA-26-055-03 | Tutte le CVE | Repository dei casi CVE-2026-32662: Codice di Debug Attivo in Produzione Avviso Campo| Valore ---|--- CVE| CVE-2026-32662 ICSA| ICSA-26-055-03 Aggiornamento A CVSS 3.1| 5.3 Medio Vettore| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N...

CVE-2026-0740

CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 Caricamento Arbitrario di File Non Autenticato. Descrizione : Il plugin Ninja Forms - File Uploads per WordPress è vulnerabile al caricamento arbitrario di file non autenticato a causa della mancanza di validazione del tipo di file e della mancan...