13590 matches found
CVE-2026-31944
LibreChat is a ChatGPT clone with additional features. From 0.8.2 to 0.8.2-rc3, The MCP Model Context Protocol OAuth callback endpoint accepts the redirect from the identity provider and stores OAuth tokens for the user who initiated the flow, without verifying that the browser hitting the redire...
CVE-2026-31944 LibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link
LibreChat is a ChatGPT clone with additional features. From 0.8.2 to 0.8.2-rc3, The MCP Model Context Protocol OAuth callback endpoint accepts the redirect from the identity provider and stores OAuth tokens for the user who initiated the flow, without verifying that the browser hitting the redire...
SUSE CVE-2026-27940
llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the ggufinitfromfileimpl in gguf.cpp is vulnerable to an Integer overflow, leading to an undersized heap allocation. Using the subsequent fread writes 528+ bytes of attacker-controlled data past the buffer boundary. This is...
MINI-64M2-Q46F-6G5R
Bulletin has no description...
MINI-WX4R-7MMF-7W9X
Bulletin has no description...
MINI-CMVR-6VVM-2R6G
Bulletin has no description...
CVE-2026-32454 WordPress Avada Core plugin < 5.15.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeFusion Avada Core fusion-core allows DOM-Based XSS.This issue affects Avada Core: from n/a through 5.15.0...
CVE-2026-32450
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows DOM-Based XSS.This issue affects Active Products Tables for WooCommerce: from n/a through = 1.0.7...
MINI-VX39-834J-CJJV
Bulletin has no description...
MINI-865X-872P-HF44
Bulletin has no description...
MINI-HXV2-5PJJ-4G44
Bulletin has no description...
MINI-729G-CQ3R-6XHP
Bulletin has no description...
MINI-64G9-5942-XM7H
Bulletin has no description...
MINI-9V85-295X-R477
Bulletin has no description...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
🐍 SNAKEBITE v2.0 ⚡ The Ultimate Automated Web Security Sc...
MINI-M4R2-C746-5V59
Bulletin has no description...
MINI-M243-P84W-24VV
Bulletin has no description...
MINI-C36V-67HV-27RR
Bulletin has no description...