44203 matches found
PT-2026-68222
Name of the Vulnerable Software and Affected Versions Progress MarkLogic Server versions prior to 11.3.6 Progress MarkLogic Server versions prior to 12.0.3 Description A server-side request forgery SSRF - a flaw where an attacker induces the server to make requests to an unintended location -...
PT-2026-68308
Name of the Vulnerable Software and Affected Versions PraisonAI versions 1.5.128 through 1.6.57 Description The web crawl function in praisonaiagents.tools.web crawl tools is susceptible to server-side request forgery SSRF. Although the system validates the initial URL to block direct loopback an...
Photon OS 5.0: Cloud PHSA-2023-5.0-91-0001
An update of the cloud package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0001. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
PT-2026-68199
Name of the Vulnerable Software and Affected Versions IBM Cloud Pak For Business Automation versions 24.0.0 through 26.0.0 Description A remote attacker could obtain sensitive information that is exposed within manifest files. Recommendations At the moment, there is no information about a newer...
CVE-2026-15587: Origin Validation Error
Improper Privilege Management in Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This vulnerability was patched with version...
PT-2026-68048
Name of the Vulnerable Software and Affected Versions Mealie affected versions not specified Description The AsyncSafeTransport SSRF guard in mealie/pkgs/safehttp/transport.py fails to pin the validated IP address to the actual connection. The system resolves the target hostname to check it again...
CVE-2026-55523: Server-Side Request Forgery (SSRF)
PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.webcrawltools.webcrawl function is vulnerable to server-side request forgery. While it validates the initially supplied URL and blocks direct loopback and private destinations, its default httpx...
CVE-2026-12762: Insertion of Sensitive Information into Externally-Accessible File or Directory
IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files...
CVE-2026-9203: Server-Side Request Forgery (SSRF)
A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to bypass protections for cloud instance metadata endpoints. Successful exploitation can disclose cloud credentials and compromise cloud resourc...
CVE-2026-18852: Improper Check for Unusual or Exceptional Conditions
A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual condition...
Release Information for Veeam Recovery Orchestrator 13 and Updates
Veeam Recovery Orchestrator 13 Releases 13.1.0.483 2026-07-29 Embedded component versions: Veeam Backup & Replication 13.1.0.411, Veeam ONE 13.1.0.7034 Release Notes What's New 13.0.3.26 2026-08-28 Embedded component versions: Veeam Backup & Replication 13.0.3.63, Veeam ONE 13.0.2.7159 Release...
SUSE SLES12 Security Update : google-cloud-sap-agent (SUSE-SU-2026:3471-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3471-1 advisory. This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only...
SUSE SLES15 Security Update : google-cloud-sap-agent (SUSE-SU-2026:3472-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3472-1 advisory. This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only...
ChainDrop supply chain compromise: Anatomy of a self-propagating worm
In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. Indicators of compromise IOC 4. Microsoft Defender XDR detections 5. Advanced hunting queries 6. Learn more Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting more than 400...
CVE-2026-18852
The CVE concerns epsilla-cloud vectordb up to version 0.3.18 with a flaw in the Filter Parser’s engine/query/expr/expr.cpp, specifically in SplitTokens/ShuntingYard. The issue is described as an improper check for unusual conditions, allowing a local attacker to exploit the vulnerability. The exp...
CVE-2026-18852
A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual condition...
CVE-2026-18852 epsilla-cloud vectordb Filter expr.cpp ShuntingYard unusual condition
A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual condition...
CVE-2026-18852 epsilla-cloud vectordb Filter expr.cpp ShuntingYard unusual condition
A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual condition...
MAL-2026-11543 Malicious code in simple-date-formatter-new-5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204253c08cc90b592f9c086ada633879141aee2bdf27e7286007c709f3b866ab Package advertised as a date-formatting utility performs supply-chain attack behavior. package.json declares a postinstall shell one-liner that, on n...
