3902 matches found
PT-2026-79356
Name of the Vulnerable Software and Affected Versions Remote Utilities Host versions prior to 7.7.3.1 Description Insecure Access Control Lists ACLs are set on all DLL files within the installation directory C:Program Files x86Remote Utilities - Host, granting full control to the built-in Everyon...
@bruno_groehs/n8n-nodes-chatmodel-reasoning (>=0.1.1, <=1.0.1), @fixtse/n8n-nodes-prodex (>=0.6.0, <=0.7.2) +31 more potentially affected by CVE-2026-77085 via @n8n/ai-utilities (>=0.3.0, <=0.24.2)
@n8n/ai-utilities NPM version =0.3.0, =0.1.1, =0.6.0, =0.7.0, =0.1.0, =1.21.0, =0.20.0, =0.21.0, =1.0.1, =0.1.1, =0.1.28, =0.1.0, =1.4.4, =1.4.5 and more Source cves: CVE-2026-77085 Source advisory: SNYK:JS-N8NAIUTILITIES-20186758...
@n8n/agents (0.17.0), @n8n/ai-node-sdk (0.22.0) +6 more potentially affected by CVE-2026-77085 via @n8n/ai-utilities (0.25.0)
@n8n/ai-utilities NPM version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/ai-utilities and may be impacted: - @n8n/agents 0.17.0 - @n8n/ai-node-sdk 0.22.0 - @n8n/ai-workflow-builder 1.32.0 - @n8n/create-node 0.40.0 - @n8n/instance-ai...
Server-side Request Forgery (SSRF)
Overview @n8n/ai-utilities is an Utilities for building AI nodes in n8n Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the searxngSearch function in packages/@n8n/ai-utilities/src/web-search/searxng-search.ts, which issues its request to the credential's A...
Oracle Linux 8 : sg3_utils (ELSA-2026-56130)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56130 advisory. 1.44-6.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188162 Tenable has extracted the preceding description block directly from the...
Norton Utilities Ultimate NortonUtilitiesSvc Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Norton Utilities Ultimate. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Norton...
secbutler v0.2.3
Essential utilities for pentester, bug-bounty hunters and security researchers Features • Usage • Installation • License • secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing...
CVE-2026-73307: Server-Side Request Forgery (SSRF)
Budibase is an open-source low-code platform. Prior to 3.39.4, uploadUrl in packages/server/src/utilities/fileUtils.ts used a bare server-side fetch for string attachment values passed by processAttachments in packages/server/src/sdk/workspace/ai/helpers/rows.ts. A builder with the AI...
BusyBox data_extract_all.c DoS
The vulnerability of the dataextractall.c component of the UNIX utility set in BusyBox is related to external control via a filename or file path. Exploiting this vulnerability can allow an attacker to cause a service failure...
keras-utilities (>=0.1.7, <=0.1.27) potentially affected by CVE-2026-9335 via keras (1.2.1)
keras PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-utilities =0.1.7, =0.1.27 Source cves: CVE-2026-9335 Source advisory: OSV:PYSEC-2026-3633...
keras-utilities (>=0.1.7, <=0.1.27) potentially affected by CVE-2026-12480 via keras (1.2.1)
keras PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-utilities =0.1.7, =0.1.27 Source cves: CVE-2026-12480 Source advisory: OSV:PYSEC-2026-3629...
keras-utilities (>=0.1.7, <=0.1.27) potentially affected by CVE-2026-12482 via keras (1.2.1)
keras PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-utilities =0.1.7, =0.1.27 Source cves: CVE-2026-12482 Source advisory: OSV:PYSEC-2026-3630...
keras-utilities (>=0.1.7, <=0.1.27) potentially affected by CVE-2026-12484 via keras (1.2.1)
keras PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-utilities =0.1.7, =0.1.27 Source cves: CVE-2026-12484 Source advisory: OSV:PYSEC-2026-3634...
keras-utilities (>=0.1.7, <=0.1.27) potentially affected by CVE-2026-12481 via keras (1.2.1)
keras PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-utilities =0.1.7, =0.1.27 Source cves: CVE-2026-12481 Source advisory: OSV:PYSEC-2026-3631...
keras-utilities (>=0.1.7, <=0.1.27) potentially affected by CVE-2026-12479 via keras (1.2.1)
keras PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-utilities =0.1.7, =0.1.27 Source cves: CVE-2026-12479 Source advisory: OSV:PYSEC-2026-3632...
keras-utilities (>=0.1.7, <=0.1.27) potentially affected by CVE-2026-12570 via keras (1.2.1)
keras PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-utilities =0.1.7, =0.1.27 Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...
Malicious code in hex-encode-utils (npm)
hex-encode-utils is a purpose-built npm trojan that masquerades as a zero-dependency hex encoding/decoding utility published by the npm account devroolx under the repo github.com/stdlib-utils/hex-encode-utils. It is a multi-stage downloader/loader that runs automatically on install via a...
CVE-2026-19266 Kirachon context-engine review-git-diff Endpoint gitUtils.ts execGitCommand command injection
A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading to version 1.9.1...
OESA-2026-3257 gdb security update
GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read...
