CVE-2026-87051

A flaw was found in operator-foundry. The path-containment check, designed to restrict file access within a build context, only performs string-based validation. It fails to resolve symbolic links symlinks, allowing an attacker to create a symlink within the build context that points to files or...

CVE-2026-87057

A flaw was found in olm-operator-konflux-sample. The build pipelines use mutable floating tags to reference runtime base images instead of immutable SHA256 digests. This configuration allows for the content of the base images to be altered without detection, potentially leading to the introductio...

xzutils_backdoor_obfuscation

xzutilsbackdoorobfuscation 此脚本复现了 XZ utils 攻击（CVE-2024-3094）所使用的混淆技术。 它仅在 xzutils v5.6.0 上经过测试。 ⚠️ 此代码仅供教育目的使用，不应被用于恶意活动。风险自负。 ⚠️ 前提条件 你的工作目录中必须包含来自 xzutils 5.6.0 的原始 good-largecompressed.lzma 文件。 使用方法 运行以下命令： ./obfuscatepayload.sh yourpayload 将生成一个 good-largecompressed.lzma.modified 文件，你需要将其放入...

CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 SAP NetWeaver Development Infrastructure의 서버 측 요청 위조SSRF 취약점 root@kitploit: Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Vendor URL: https://sap.co...

CVE-2026-33017-langflow-rce

CVE-2026-33017 — Langflow 未認証リモートコード実行 RCE 概要 CVE ID: CVE-2026-33017 影響を受けるソフトウェア: Langflow 脆弱なバージョン: = 1.9.0 深刻度: Critical 作成者: r3nsi15 日付: 2026 説明 Langflow は、任意の CustomComponent コードブロックを受け入れ、認証なしでサーバー側で実行する公開フロービルドエンドポイント（/api/v1/buildpublictmp/flowID/flow）を公開しています。CustomComponent ノードの code...

CVE-2026-19651 IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input...

Code-27-Companion-Hub-Exploits

Code 27 3D Companion Hub の脆弱性 CVE-2026-36027, CVE-2026-36028 Code 27 3D Companion Hub は、カスタム AI キャラクター（"Codie"）をアニメーション 3D コンパニオンとして表示する物理デスクトップデバイスです。ユーザーは任意の 3D モデルをアップロードまたは作成でき、マルチモーダル AI により、キャラクターは周囲を見て、口調やボディランゲージを読み取り、自由な会話を行うことができます。 この記事では、デバイスへの物理的アクセスを必要とする 2...

CVE-2026-33017-Langflow-RCE

CVE-2026-33017 - Langflow RCE 脆弱性 infrar3d によるエクスプロイト この概念実証PoCエクスプロイトは、Langflow 1.9.0 より前のバージョンに存在する重大なリモートコード実行RCE脆弱性を標的としています。この脆弱性により、認証されていない攻撃者は、フロー構築 API エンドポイントを通じて悪意のある Python コードを注入し、任意のシステムコマンドを実行できます。この脆弱性は /api/v1/buildpublictmp/flowid/flow endpoint に存在し、コンポーネントテンプレートの code...

BIT-JENKINS-2026-84657

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s flag to cancel a build triggered to wait for completion, allowing attackers with Item/Build permission to cancel builds started by other users...

BIT-JENKINS-2026-84656

A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to...

Build Numbers and Versions of Veeam Plug-In for KubeVirt

This KB article lists all versions of the Veeam Plug-In for KubeVirt and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for KubeVirt 1 Releases Veeam Plug-In for KubeVirt 1.0 Independent Plug-In Release | 13.1.0.428 | 2026-09-08...

MGASA-2026-0379 Updated exiv2 package fixes security vulnerabilities

Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds. CVE-2026-68546 Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files. CVE-2026-68547 Out of bounds read in CrwMap::decodeBasic. CVE-2026-49275...

CVE-2026-86259

OpenMAIC versions before 1.0.1 contain a server-side request forgery (SSRF) vulnerability in non-production builds where URL validation is gated by environment. Unauthenticated attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter, reaching cloud instance met...

CVE-2026-86259 OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validation

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud...

CVE-2026-19298

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute arbitrary code due to an authorization bypass in the flow build process...

CVE-2026-19298 Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute arbitrary code due to an authorization bypass in the flow build process...

CVE-2026-19298

IBM Langflow OSS versions 1.0.0 through 1.11.2 contain an authorization policy bypass in the authenticated flow-build endpoint . While the dedicated custom component API correctly enforces the LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true control (returning HTTP 403 to non-superusers), the flow-build...

EUVD-2026-71598

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute arbitrary code due to an authorization bypass in the flow build process...

GHSA-Q663-5HFG-W4PM vulnerabilities

Vulnerabilities for packages: chromium...

ManageEngine Password Manager Pro < Build 13235 SQLi (CVE-2026-14828)

According to its self-reported build number, the ManageEngine Password Manager Pro application running on the remote host is prior to build 13235. It is, therefore, affected by an authenticated SQL injection vulnerability. An authenticated, remote attacker can exploit this by crafting a malicious...