27479 matches found
CVE-2026-26003
FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but ...
CVE-2026-26003
CVE-2026-26003 affects FastGPT versions 4.14.0–4.14.5, where an unauthenticated attacker can access the plugin system via FastGPT/api/plugin/xxx, potentially crashing the plugin system and causing loss of plugin installation status. The impact on confidentiality/integrity is limited, with availab...
CVE-2026-21525
creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:01:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0053 2026-02-10 18:53:06+00:00| seen|...
CVE-2026-21533
creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:01:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0053 2026-02-10 18:36:00+00:00| seen|...
CVE-2026-21511
creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:11:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0058 2026-02-11 10:00:44+00:00| seen|...
GHSA-HXW8-4H9J-HQ2R
creationtimestamp| type| source ---|---|--- 2026-02-10 07:40:05+00:00| seen| https://gist.github.com/alon710/39fd68ea5d11f2bf18c6fe6acdd0ee1d...
GHSA-4255-C27H-62M5
creationtimestamp| type| source ---|---|--- 2026-02-10 05:40:05+00:00| seen| https://gist.github.com/alon710/5db565d21892e24ae6ebdfecaa349708...
GHSA-8GRV-JQ2G-CFHW
creationtimestamp| type| source ---|---|--- 2026-02-10 05:10:05+00:00| seen| https://gist.github.com/alon710/041178d8a553aa39851ef0441a5d85f3...
CVE-2026-0488
creationtimestamp| type| source ---|---|--- 2026-02-10 04:22:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mei4hmbz4n25 2026-02-10 06:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meibww5ntu2b 2026-02-10 06:00:52+00:00| seen|...
GHSA-GG64-XXR9-QHJP
creationtimestamp| type| source ---|---|--- 2026-02-10 03:10:05+00:00| seen| https://gist.github.com/alon710/98338210f5bd9ada35f70b193f4ec636...
[SECURITY] Fedora 43 Update: rust-procs-0.14.10-7.fc43
A modern replacement for ps...
PT-2026-7419
Name of the Vulnerable Software and Affected Versions FastGPT versions 4.14.0 through 4.14.5 Description FastGPT, an AI Agent building platform, has an issue where the plugin system can be accessed directly through the API endpoint /api/plugin/xxx without authentication. This affects versions...
FastGPT input validation vulnerability
FastGPT is an open-source knowledge base question-answering system based on large language models, developed by Labring. In versions 4.14.0 to 4.14.5 of FastGPT, there is a vulnerability related to input validation errors. This vulnerability stems from the direct access to the plugin system witho...
GHSA-9F5H-MMQ6-2X78
creationtimestamp| type| source ---|---|--- 2026-02-09 23:10:05+00:00| seen| https://gist.github.com/alon710/f17e6e93e24b62efe6529ae7f171eec3...
GHSA-7JX7-3846-M7W7
creationtimestamp| type| source ---|---|--- 2026-02-09 22:10:05+00:00| seen| https://gist.github.com/alon710/282df0d3c2c9c8c835a6fd15acd2475f...
CVE-2026-25806
PlaciPy (version 1.0.0) exposes potential IDOR-like authorization gaps on student records via GET /api/students/:email, PUT /api/students/:email/status, and DELETE /api/students/:email. The backend only enforces authentication (authenticateToken) and does not verify ownership, administrative/staf...
CVE-2025-1303
creationtimestamp| type| source ---|---|--- 2026-02-09 18:34:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-1303.yaml 2026-02-12 21:03:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcerf2g2c...
PlaciPy authorization issue vulnerability
PlaciPy is an open-source tool developed by PlaciPy to generate placeholder images. Version 1.0.0 of PlaciPy has a vulnerability related to authorization issues. This vulnerability stems from the code evaluation endpoint not verifying the lifecycle status of evaluations, which may lead to...
Linux kernel RAID LVM DoS
The vulnerability of the statusresync function in the drivers/md/md.c file of the multiple-device driver RAID and LVM module of the Linux kernel is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...