1112351 matches found
WordPress RevSlider - Remote Code Execution via File Upload
The ThemePunch Slider Revolution revslider plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restrict access to administrator AJAX functionality, which allows remote attackers to 1 upload and execute arbitrary files via an updateplugin...
MINI-X5GV-74R3-6Q7J
Bulletin has no description...
EUVD-2026-52704
A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This produc...
CVE-2026-18770
VibeSurf (vibesurf-ai) is affected up to commit cd6e519d507cdd4d63061300bf60fb176e1f57e0. The vulnerability targets the Python Validation Handler’s code in the /code path, where an unspecified function may be manipulated to achieve code injection. The advisory reports remote exploitation as possi...
CVE-2026-18770 vibesurf-ai VibeSurf Python Validation code code injection
A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This produc...
Flowise RCE via TypeORM DataSource
============================================================================= Security Advisory elttam Topic: Flowise RCE via TypeORM DataSource Module: FlowiseAI/Flowise Disclosed: 15-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source, low-co...
NPM: Flowise RCE via TypeORM DataSource
NPM: Flowise RCE via TypeORM DataSource vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...
NPM: Flowise RCE via TypeORM DataSource
NPM: Flowise RCE via TypeORM DataSource vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...
EUVD-2026-52701
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in...
CVE-2026-69251 Flowise RCE via TypeORM DataSource
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in...
CVE-2026-69251
Flowise prior to version 3.1.3 is affected by a RCE in the TypeORM DataSource configuration via the additionalConfig input on specific nodes (record managers and agent memory nodes for MySQL, Postgres, SQLite, and MySQL/AgentMemory). The issue allows an authenticated user to inject arbitrary Java...
MINI-W5P8-8FW3-4PP9
Bulletin has no description...
MINI-V7MC-MWCJ-H55F
Bulletin has no description...
MINI-H4CF-VCPH-MF43
Bulletin has no description...
MINI-P425-4C93-R82H
Bulletin has no description...
MINI-3HRC-HH2V-RVVH
Bulletin has no description...
MINI-75X7-3F94-8CVF
Bulletin has no description...
MINI-J398-897F-R8PQ
Bulletin has no description...