25183 matches found
EUVD-2026-51327
Outstatic CMS = 2.1.9 contains a hardcoded JWT signing secret. When the OSTTOKENSECRET environment variable is not set, the application falls back to the default value which is publicly visible in the source code repository. An unauthenticated remote attacker can exploit this by forging JWT sessi...
PT-2026-66519
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description Unauthenticated remote code execution is possible via environment variable injection in the MCP Model Context Protocol stdio launcher. The issue occurs in the...
CVE-2026-52539
Outstatic CMS versions
PT-2026-66591
Name of the Vulnerable Software and Affected Versions Outstatic CMS versions prior to 2.2.0 Description The application contains a hardcoded JSON Web Token JWT signing secret. If the OST TOKEN SECRET environment variable is not configured, the system uses a default secret available in the public...
CVE-2026-52539
Outstatic CMS = 2.1.9 contains a hardcoded JWT signing secret. When the OSTTOKENSECRET environment variable is not set, the application falls back to the default value which is publicly visible in the source code repository. An unauthenticated remote attacker can exploit this by forging JWT sessi...
PT-2026-66655
Impact In its default configuration, a Rails application that displays image variants may allow an unauthenticated attacker to read arbitrary files from the server, including the process environment. That environment typically holds secret key base and often credentials for external systems, whic...
CVE-2026-12562: Missing Authentication for Critical Function
The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system. This vulnerability stems from a network-accessible port running a Target Communications Framework TCF service that does not require any...
CVE-2026-12940: Improper Neutralization of Special Elements used in an OS Command
IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP Model Context Protocol stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUSENVVARS blocklist fails to include...
CVE-2026-22621: Improper Neutralization of Special Elements used in an OS Command
Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment...
CVE-2026-59326: Insertion of Sensitive Information into Log File
The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...
CVE-2026-52539
Outstatic CMS = 2.1.9 contains a hardcoded JWT signing secret. When the OSTTOKENSECRET environment variable is not set, the application falls back to the default value which is publicly visible in the source code repository. An unauthenticated remote attacker can exploit this by forging JWT sessi...
PAK ViPNet Coordinator HW 4 Decompression Capabilities
Vulnerability of the automatic update mechanism for PAK ViPNet Coordinator HW 4, ViPNet Coordinator IG 4, and ViPNet xFirewall 5, related to excessive capabilities for decompressing updates. Exploiting this vulnerability allows a malicious actor, operating with a pre-compromised network managemen...
CVE-2026-52539
Outstatic CMS = 2.1.9 contains a hardcoded JWT signing secret. When the OSTTOKENSECRET environment variable is not set, the application falls back to the default value which is publicly visible in the source code repository. An unauthenticated remote attacker can exploit this by forging JWT sessi...
openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination
A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI Generic Security Service Application Programming Interface indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific...
franka-valve (0.0.0), wildfire-environment (>=0.1.0, <=0.2.1) potentially affected by CVE-2026-13346 via pip (21.0.0)
pip PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - franka-valve 0.0.0 - wildfire-environment =0.1.0, =0.2.1 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...
Root-the-Box
EH-Stage6: Exploit Chain as Code This repository contains my...
CVE-2026-67427
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, the workflow engine variable resolver expands $env.VAR for any host environment variable without an allowlist or capability policy check, allowing a workflow parameter to bypass the default capability polic...
CVE-2026-67425
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, llm.chat reads provider keys such as OPENAIAPIKEY and ANTHROPICAPIKEY from the environment and sends them in the Authorization: Bearer header to caller-controlled baseurl, allowing an attacker to receive th...
franka-valve (0.0.0), wildfire-environment (>=0.1.0, <=0.2.1) potentially affected by CVE-2026-13346 via pip (21.0.0)
pip PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - franka-valve 0.0.0 - wildfire-environment =0.1.0, =0.2.1 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...