Lucene search
+L

2329 matches found

CVE
CVE
added 1 hour ago10 views

CVE-2026-73297

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, isblockedip in ufo/utils/urlsecurity.py did not block NAT64 prefixes 64:ff9b::/96 and 64:ff9b:1::/48, the 6to4 prefix 2002::/16, or the Teredo prefix 2001::/32 and did not re-check embedde...

6.9CVSS5.4AI score
SaveExploits0References3
Cvelist
Cvelist
added 8 hours ago7 views

CVE-2026-18652 Velociraptor STACK Type Download Path Bypasses Denied Prefix Check

Velociraptor allows reading Stacked result sets from the GUI. Velociraptor's multi-tenant design stores sub orgs within the datastore directory. The path requested by the GUI is not correctly checked against the prefix deny list, allowing result sets to read from denied prefixes. In particular, a...

4.9CVSS
SaveExploits0References1
CVE
CVE
added 8 hours ago9 views

CVE-2026-18652

Velociraptor exposes a data-access issue in the GUI where the path prefix deny check can be bypassed, enabling read access to stacked result sets across tenant orgs. The multi-tenant design stores sub-org data under a shared datastore directory, and a user with read access to the root org can acc...

4.9CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added 9 hours ago17 views

CVE-2026-19566

Net::CIDR::Set for Perl (versions before 0.23) is vulnerable to memory exhaustion and malformed ranges when handling unbounded IPv6 prefix lengths. The encode path accepts any prefix length (0|[1-9][0-9]*) and builds a mask of width+8 bits, causing large allocations (e.g., ::/100000000 can alloca...

5.3AI score
SaveExploits0References4
Nuclei
Nuclei
added 12 hours ago17 views

Advance Post Prefix WordPress plugin - Reflected XSS

Advance Post Prefix WordPress plugin through 1.1.1 contains a reflected cross-site scripting caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request. id: CVE-2024-12734 info: name: Advance...

6.1CVSS4.9AI score0.00549EPSS
SaveExploits1References2
Nuclei
Nuclei
added 12 hours ago61 views

ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE

ServiceNow AI Platform Brazil, Australia, Zurich, and Yokohama releases before patching contains a pre-authentication remote code execution vulnerability. The /assessmentthanks.do endpoint passes the sysparmassessabletype parameter into GlideRecord's addQuery, which evaluates "javascript:" prefix...

9.5CVSS6.5AI score0.26734EPSS
SaveExploits1References5
Nuclei
Nuclei
added 12 hours ago81 views

Traefik - Open Redirect

Traefik before 1.7.26, 2.2.8, and 2.3.0-rc3 contains an open redirect vulnerability in the X-Forwarded-Prefix header. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-15129 info: name:...

6.1CVSS5.4AI score0.08011EPSS
SaveExploits0References5
NVD
NVD
added yesterday6 views

CVE-2026-18636

The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to...

6.8CVSS
SaveExploits0References1
CVE
CVE
added yesterday16 views

CVE-2026-72921

SeaweedFS CVE-2026-72921 affects the filer server component where the authorization check used strings.HasPrefix on raw path strings, allowing a JWT scoped to /tenant1 to access sibling paths like /tenant1234, /tenant1-old, and /tenant1backup. Root cause: prefix-based path matching without proper...

8.1CVSS5.3AI score
SaveExploits0References4
OSV
OSV
added yesterday2 views

CVE-2026-72921 SeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling paths

SeaweedFS is a distributed storage system. Prior to 4.24, the weed/server/filerserverhandlers.go allowedprefixes authorization check used strings.HasPrefix on raw path strings, so a filer JWT scoped to /tenant1 also authorized sibling paths such as /tenant1234, /tenant1-old, and /tenant1backup,...

8.1CVSS5.4AI score
SaveExploits0References6
EUVD
EUVD
added yesterday8 views

EUVD-2026-56159

SeaweedFS is a distributed storage system. Prior to 4.24, the weed/server/filerserverhandlers.go allowedprefixes authorization check used strings.HasPrefix on raw path strings, so a filer JWT scoped to /tenant1 also authorized sibling paths such as /tenant1234, /tenant1-old, and /tenant1backup,...

8.1CVSS5.3AI score
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2 days ago5 views

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

7.5CVSS5.3AI score0.00728EPSS
SaveExploits0References8
OSV
OSV
added 5 days ago8 views

GHSA-54FX-42GC-7VW4 Hono: Algorithmic Complexity DoS in Language Middleware

Summary The languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen-separated subtags. Details To implement progressive language-tag truncation, normalizeLanguage repeatedly calls parts.slice0...

5.3CVSS5.3AI score0.00291EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 5 days ago14 views

Hono: Algorithmic Complexity DoS in Language Middleware

Summary The languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen-separated subtags. Details To implement progressive language-tag truncation, normalizeLanguage repeatedly calls parts.slice0...

5.3CVSS5.3AI score0.00291EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 5 days ago12 views

EUVD-2026-54172

Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentication middleware defined in packages/server/src/utils/constants.ts. Attackers...

8.7CVSS5.5AI score0.00373EPSS
SaveExploits0References3
OSV
OSV
added 6 days ago5 views

CVE-2026-70636 Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint

Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentication middleware defined in packages/server/src/utils/constants.ts. Attackers...

8.7CVSS5.5AI score
SaveExploits0References6
Cvelist
Cvelist
added 6 days ago30 views

CVE-2026-70636 Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint

Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentication middleware defined in packages/server/src/utils/constants.ts. Attackers...

8.7CVSS0.00373EPSS
SaveExploits0References3
Cvelist
Cvelist
added 6 days ago26 views

CVE-2026-71433 LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages persisted hierarchical namespaces as a dot joined string and scoped reads by...

5.3CVSS0.00225EPSS
SaveExploits0References5
CVE
CVE
added 6 days ago55 views

CVE-2026-71433

CVE-2026-71433 affects LangGraph checkpoint stores for Postgres and SQLite. Before 3.1.1, langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite persisted hierarchical namespaces as a dot-joined string and used a simple prefix match for reads, allowing an authenticated caller to access ite...

5.3CVSS5.5AI score0.00225EPSS
SaveExploits0References5
OSV
OSV
added 6 days ago7 views

CVE-2026-64652 GitHub CLI: Partial token disclosure in `gh auth status` output

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...

3.3CVSS5.4AI score
SaveExploits0References5
Rows per page
Query Builder