CVE-2026-5001 PromtEngineer localGPT server.py do_POST unrestricted upload

A flaw has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The affected element is the function doPOST of the file backend/server.py. This manipulation causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been publishe...

CVE-2026-4998

creationtimestamp| type| source ---|---|--- 2026-03-28 15:15:27+00:00| published-proof-of-concept| Telegram/09Z2uSywZ0eaMBcjzeKEvNTJqqyhgJAVS7JG0bu28jYxi8 2026-03-28 15:25:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mi4wy26n572y 2026-03-28 17:19:58+00:00| seen|...

CVE-2018-25220

creationtimestamp| type| source ---|---|--- 2026-03-28 15:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4w2lcg4d27 2026-04-14 04:43:18+00:00| seen| https://bsky.app/profile/breachandbuild.bsky.social/post/3mjgkyj5fcc22...

CVE-2017-20229

creationtimestamp| type| source ---|---|--- 2026-03-28 14:59:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4vioav7b2q 2026-04-14 04:42:21+00:00| seen| https://bsky.app/profile/breachandbuild.bsky.social/post/3mjgkws62rt2y...

CVE-2018-25224

creationtimestamp| type| source ---|---|--- 2026-03-28 14:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4uaj3aoa2i 2026-04-03 10:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3milioopfbl2a...

CVE-2016-20047

creationtimestamp| type| source ---|---|--- 2026-03-28 14:32:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4txkn6zt23...

CVE-2017-20228

creationtimestamp| type| source ---|---|--- 2026-03-28 14:08:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4soctu7y23 2026-04-03 10:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miljshcdsp2v...

CVE-2016-20046

creationtimestamp| type| source ---|---|--- 2026-03-28 14:05:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4sidqhkv24...

CVE-2026-34453

creationtimestamp| type| source ---|---|--- 2026-03-28 11:39:55+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-c77m-r996-jr3q 2026-03-31 23:20:56+00:00| seen| Telegram/8TNuFRjRJBw5r6zwiOXWdT-cqnzTtiBnsbsFB7NS1OTWS8 2026-04-01 03:07:09+00:00| seen...

CVE-2026-34449

creationtimestamp| type| source ---|---|--- 2026-03-28 11:33:06+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-68p4-j234-43mv 2026-03-31 23:06:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifc3wynhc2o 2026-03-31 23:20:56+00:00...

CVE-2026-23399

creationtimestamp| type| source ---|---|--- 2026-03-28 10:25:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4g6zvwbj25 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601 2026-07-06 05:49:48+00:00| seen|...

CVE-2026-4993

creationtimestamp| type| source ---|---|--- 2026-03-28 10:20:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4fw3iidd2o...

CVE-2025-15445

creationtimestamp| type| source ---|---|--- 2026-03-28 10:05:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4f3aa52c24...

CVE-2026-33026

creationtimestamp| type| source ---|---|--- 2026-03-28 03:19:56+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-fhh2-gg7w-gwpq 2026-03-30 20:15:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mici3i5oyj22 2026-03-30 21:21:54+00:00|...

CVE-2026-4991

creationtimestamp| type| source ---|---|--- 2026-03-28 02:49:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi3mq2hukv2z...

CVE-2026-4987

creationtimestamp| type| source ---|---|--- 2026-03-28 02:05:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi3ka6v5k327 2026-03-28 03:16:54+00:00| seen| Telegram/HQHk6b46qFnTAF0zrkYdi4jZ1-94Qa5IEvzqYOSjpwlfy8 2026-03-28 04:49:15+00:00| seen|...

EUVD-2026-16901

The Ultimate Member plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.2. This is due to the 'usermeta:passwordresetlink' template tag being processed within post content via the 'umloggedin' shortcode, which generates a valid password...

SUSE CVE-2026-33064

Free5GC is an open-source Linux Foundation project for 5th generation 5G mobile core networks. Versions prior to 1.4.2 are vulnerable to procedure panic caused by Nil Pointer Dereference in the /sdm-subscriptions endpoint. A remote attacker can cause the UDM service to panic and crash by sending ...

SUSE CVE-2026-33252

The Go MCP SDK used Go's standard encoding/json. Prior to version 1.4.1, the Go SDK's Streamable HTTP transport accepted browser-generated cross-site POST requests without validating the Origin header and without requiring Content-Type: application/json. In deployments without Authorization,...

LocalGPT 代码问题漏洞

LocalGPT is a localized private document-based intelligent question-and-answer and analysis platform developed by PromptEngineer. LocalGPT has code issues and vulnerabilities; these vulnerabilities stem from incorrect operations on the doPOST function, resulting in unlimited uploads...