CVE-2026-104312

IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the intended extraction directory. Extraction of the archive by a victim using a non-sanitizing tool could result in arbitrary file...

CVE-2026-104312

IBM Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to a path traversal issue (CWE-22 ). An authenticated attacker can produce a server-generated ZIP archive containing entry paths that traverse outside the intended extraction directory. If a victim extracts this archive using a non-san...

EUVD-2026-113148

IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the intended extraction directory. Extraction of the archive by a victim using a non-sanitizing tool could result in arbitrary file...

CVE-2026-107018

Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files inside the commander's private storage...

CVE-2026-106036

The Szafir application is vulnerable to improper certificate validation (CWE-295). The software accepts any client or server certificate without performing necessary certificate or hostname validation, which allows for unauthenticated HTTPS connections . An attacker can leverage this by providing...

EUVD-2026-113121

Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS connections without authenticating the remote server. An attacker can provide an arbitrary SSL/TLS certificate and cause the application to download an update file from their...

CVE-2026-106036 Improper certificate validation in Szafir

Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS connections without authenticating the remote server. An attacker can provide an arbitrary SSL/TLS certificate and cause the application to download an update file from their...

CVE-2026-93571 Path Traversal in Szafir

Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitrary XML file that will be saved in location chosen by attacker. This issue was fixed in version 2.0 build 708...

CVE-2026-93571

The Szafir software is vulnerable to a Path Traversal vulnerability (CWE-22) involving uploaded filenames. A man-in-the-middle attacker capable of rerouting update requests to a malicious server can provide an arbitrary XML file that the system will save in a directory chosen by the attacker. Thi...

EUVD-2026-113120

Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitrary XML file that will be saved in location chosen by attacker. This issue was fixed in version 2.0 build 708...

CVE-2026-118599

A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompressxpithread used libarchive with archivereadsupportformatall and filters, so the installer did not require a real ZIP. A TAR file name...

Security Bulletin: DataStage on Cloud Pak for Data has a vulnerability due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-45623 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. ...

CVE-2026-119050

Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr. Attackers can use prompt injection to make the agent call pandas.readpickle on attacker-controlled pat...

CVE-2026-113692

Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated administrators to read files outside the intended directory...

openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)

A flaw was found in the Sound component of Java SE and GraalVM. This issue allows an unauthenticated remote attacker to cause a partial Denial of Service DoS by convincing a user to run untrusted code within a sandboxed Java environment...

openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)

A flaw was found in the Sound component of Java SE and GraalVM. This issue allows an unauthenticated remote attacker to cause a partial Denial of Service DoS by convincing a user to run untrusted code within a sandboxed Java environment...

CVE-2026-115522

A flaw was found in the FileArtifactService component of Google Agent Development Kit ADK. The service fails to isolate stored files by application name when constructing directory paths on disk. This issue allows a user in one application to access, overwrite, or delete stored files belonging to...

Exploitation-Basic-Note-Cybersec101-

Exploitation-Basic-Note-Cybersec101- Here are my notes after f...

CVE-2026-117608

A flaw was found in assimp. An attacker can exploit an integer overflow in the MD2 file parser by providing a specially crafted 3D model file with manipulated header values. When processed, this vulnerability triggers an out-of-bounds memory read, resulting in a Denial of Service DoS through an...

MAL-2026-17880 Malicious code in seapy-ops (PyPI)

In seapy-ops versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, and 1.1.2, an advertised local file analysis tool conceals folder collection and upload commands behind an unlock gate. Once unlocked, it recursively uploads eligible files from the working directory to a configured remote server; a hidden...