23303 matches found
CVE-2019-25629
creationtimestamp| type| source ---|---|--- 2026-03-24 13:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhsqbqobq42f 2026-03-28 05:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi3waib3ha2d...
CVE-2026-33867
creationtimestamp| type| source ---|---|--- 2026-03-24 13:53:11+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-363v-5rh8-23wg 2026-03-27 19:08:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2sw4s6x62t 2026-03-27 19:15:20+00:00| seen|...
CVE-2019-25645
creationtimestamp| type| source ---|---|--- 2026-03-24 13:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhsosjtn4t2x...
CVE-2019-25641
creationtimestamp| type| source ---|---|--- 2026-03-24 13:27:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhsoiaxpcv2g...
CVE-2019-25639
creationtimestamp| type| source ---|---|--- 2026-03-24 13:22:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhso7n7cfi2d...
CVE-2019-25647
creationtimestamp| type| source ---|---|--- 2026-03-24 13:20:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhso3s7ush2d 2026-03-26 03:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhwom3cbxu2d...
CVE-2026-33497
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...
CVE-2026-33497 Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...
CVE-2026-33497 Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...
CVE-2026-33497 Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...
CVE-2026-33497
Langflow before 1.7.1 is affected by a path traversal in GET /profile_pictures/{folder_name}/{file_name} where folder_name and file_name are not strictly filtered, allowing an attacker to read the secret_key across directories. A patch was released in version 1.7.1; upgrading to 1.7.1 or newer mi...
CVE-2019-25627
creationtimestamp| type| source ---|---|--- 2026-03-24 13:04:08+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhsn6qacuy2p...
CVE-2019-25631
creationtimestamp| type| source ---|---|--- 2026-03-24 12:59:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhsmw6y5pt2i 2026-03-27 18:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi2p4y3k6g2a...
EUVD-2019-20010
Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...
CVE-2019-25635
Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...
CVE-2024-10845
creationtimestamp| type| source ---|---|--- 2026-03-24 12:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhsjmi7gam2b...
CVE-2019-25635 Zeeways Matrimony CMS Lastest SQL Injection via profile_list
Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...
CVE-2019-25635
Zeeways Matrimony CMS is affected by SQL injection vulnerabilities in the profile_list endpoint, exploitable by unauthenticated attackers via the up_cast, s_mother, and s_religion parameters to manipulate database queries and exfiltrate data using time-based or error-based techniques. The CVE-201...
CVE-2019-25635 Zeeways Matrimony CMS Lastest SQL Injection via profile_list
Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...