49538 matches found
VulnCheck KEV: CVE-2024-37014
Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...
Preserving Restored InterSystems IRIS Data Before Removing a Storage System
Article Applicability This article expands on the following note from Epic EHR System Protection Restoring from Storage Snapshot in the Veeam Backup & Replication User Guide: Before you start the restore wizard, create an auxiliary host for the LUN mount in the storage system interface, using any...
CVE-2026-68770
creationtimestamp| type| source ---|---|--- 2026-07-31 21:57:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3nq3sqt35utpv 2026-07-31 22:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxxbyuldy2z 2026-07-31 22:06:06+00:00| seen|...
CVE-2026-18420
creationtimestamp| type| source ---|---|--- 2026-07-31 21:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrxtxdxa7w2c 2026-08-20 22:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkapnkb7h22...
CVE-2026-15976
creationtimestamp| type| source ---|---|--- 2026-07-31 20:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxrap7cbf2z 2026-08-01 20:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bevoq4c2f...
CVE-2025-69935
creationtimestamp| type| source ---|---|--- 2026-07-31 20:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxqsg4hof2z...
UBUNTU-CVE-2026-53505
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. This issu...
CVE-2026-35847
creationtimestamp| type| source ---|---|--- 2026-07-31 19:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxnh4gb4m2a...
GHSA-CJ54-HPCC-GJ6H Thumbor has path traversal via post-validation URL decoding bypass in file_loader
The fileloader performs unquote on the file path AFTER the abspath + startswith security check. An attacker can use percent-encoded path traversal sequences %2e%2e for .. that pass the security check as literal directory names, but are then decoded to actual .. traversal sequences. Affected code...
CVE-2026-53502
Thumbor (open-source image thumbnail service by globo.com) is affected by a path traversal in file_loader prior to version 7.8.0. The issue occurs because file_loader decodes percent-encoded path segments after root-boundary validation, allowing traversal outside FILE_LOADER_ROOT_PATH via waterma...
EUVD-2026-51612
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...
CVE-2026-53502 Thumbor has path traversal via post-validation URL decoding bypass in file_loader
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...
GHSA-PHJ3-59PF-CP83 Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS
Summary Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. Details - Filter implementation: thumbor/filters/proportion.py - value is parsed ...
Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS
Summary Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. Details - Filter implementation: thumbor/filters/proportion.py - value is parsed ...
CVE-2026-53505 Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. This issu...
CVE-2026-53505
Thumbor (open-source photo thumbnail service by globo.com) is affected prior to version 7.8.0. The filters:proportion() function does not enforce an upper bound on and executes during the post-transform phase, enabling extremely large resizes that can exhaust CPU/memory and cause a denial of ser...
CVE-2026-53505 Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. This issu...
CVE-2026-53505
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. This issu...
EUVD-2026-51611
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. This issu...