CVE-2026-9198

CVE-2026-9198 - IBM Langflow OSS Esecuzione Remota di Codice Non Autenticata RCE Vulnerabilità critica di esecuzione remota di codice non autenticata che interessa IBM Langflow OSS. La vulnerabilità deriva dalla combinazione di due debolezze: 1. /api/v1/autologin può rilasciare un bearer token...

domi-owned

Domi-Owned Riepilogo Domi-Owned è uno strumento utilizzato per compromettere server IBM/Lotus Domino. Testato su IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0 e 9.0.1 in esecuzione su Windows e Linux. Requisiti Domi-Owned utilizza Python 3, che può essere installato tramite il gestore pacchetti della...

domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

CVE-2026-9198

...

CVE-2026-9198

CVE-2026-9198 exploit IBM Langflow Eu só estou upando o de outra pessoa de novo então se quiser saber a senha, assista ao vídeo https://youtu.be/qoQbyAhrzKg?si=8Wogp3OHNo-0CvIQ...

CVE-2026-9198

🚨 CVE-2026-9198 IBM Langflow OSS RCE non autenticata tramite bypass del login automatico 📋 Panoramica CVE-2026-9198 è una vulnerabilità critica di Remote Code Execution RCE non autenticata in IBM Langflow OSS. Questo exploit combina due vulnerabilità: CVE-2026-9103 : Bypass del login automatico c...

CVE-2026-9198

CVE-2026-9198 - IBM Langflow Nicht authentifizierte RCE per Auto-Login-Bypass PoC zu Bildungszwecken Dieses Repository bietet einen Proof of Concept zu Bildungszwecken für CVE-2026-9198 , das IBM Langflow OSS betrifft. Der PoC poc.py zeigt, wie ein nicht authentifizierter Angreifer Folgendes...

IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133

IBM Security Verify Access - Reindirizzamento Aperto durante il Flusso OAuth CVE-2024-35133 Indice 1. Panoramica 2. Descrizione Dettagliata 3. Proof of Concept 4. Soluzione 5. Cronologia della Divulgazione 6. Riferimenti 7. Crediti 8. Note Legali Panoramica Revisione : 1.0 Impatto : Persuadendo u...

Tivoli-Madness

Tivoli-Madness Avviso per: CVE-2020-28054: Una vulnerabilità di bypass dell'autorizzazione che interessa JamoDat – TSMManager Collector v. = 6.5.0.21 Un buffer overflow basato sullo stack che interessa IBM Tivoli Storage Manager Interfaccia amministrativa da riga di comando Versione 5, Release 2,...

Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite CVE-2026-69152, CVE-2026-59645, CVE-2026-16221, CVE-2026-18446, CVE-2026-14257, CVE-2026-34481, CVE-2026-12802, CVE-2026-13586, CVE-2026-15055, CVE-2026-59639, CVE-2026-59642, CVE-2026-59647,...

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

A directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1957 info: name: Joomla! Component Love Factory 1.3.4 - Local File Inclusion...

IBM BigFix Platform - Information Disclosure

IBM BigFix Platform 9.2 and 9.5 contains an information disclosure vulnerability caused by not enabling authenticated access in relay, letting remote attackers query and gather update and fixlet information, exploit requires no authentication. id: CVE-2019-4061 info: name: IBM BigFix Platform -...

IBM Maximo Asset Management Information Disclosure - XML External Entity Injection

IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. id: CVE-2020-4463 info: name: IBM Maximo Asset Management Information...

ibm-qradar-ajp_smuggling_CVE-2022-26377_poc

CVE-2022-26377 Una Proof of Concept sviluppata da @watchTowr per sfruttare una vulnerabilità di AJP Smuggling per avvelenare la coda delle risposte HTTP di un'istanza IBM QRadar con un reindirizzamento persistente. Segui il team dei watchTowr Labs per la nostra ricerca sulla sicurezza...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to Cryptographic Weakness in IBM Liberty Server ( CVE-2020-36732)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the cryptographic weakness vulnerability Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an intege...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to SQL Injection vulnerability in Dashboard UI (CVE-2025-36368)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed SQL Injection vulnerability Vulnerability Details CVEID:CVE-2025-36368 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51, and 6.2.1.0 through...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to reflected XSS vulnerability in AFT (CVE-2026-0835)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed reflected XSS vulnerability Vulnerability Details CVEID:CVE-2026-0835 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51, 6.2.1.0 through 6.2.1.1...

Security Bulletin: The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure (CVE-2025-36348)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the information disclosure vulnerability Vulnerability Details CVEID:CVE-2025-36348 DESCRIPTION: IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, an...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to an access control security vulnerability in Ops server (CVE-2025-14031)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed access control security vulnerability Vulnerability Details CVEID:CVE-2025-14031 DESCRIPTION: IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51, 6.2.1.0...