CVE-2026-107292 Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 2.30.0, the Agent.toweb and clai web development chat server does not validate the Host header, allowing a website visited by a developer to use DNS rebinding to reach a...

EUVD-2026-95099

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 2.30.0, the Agent.toweb and clai web development chat server does not validate the Host header, allowing a website visited by a developer to use DNS rebinding to reach a...

CVE-2026-107292

The Pydantic AI Python agent framework is vulnerable in versions 1.34.0 through 2.30.0 due to a lack of Host header validation in the Agent.to_web() and clai web development chat servers. An attacker can leverage DNS rebinding from a malicious website to bypass Origin checks and CSRF tokens , acc...

CVE-2025-61777

CVE-2025-61777 1. Modificación no autorizada de plantillas de insignias en FlagforgeCTF CVE-2025-61777 Resumen La aplicación Flagforge https://flagforge.xyz expone vulnerabilidades críticas en sus endpoints de API administrativa, específicamente /api/admin/badge-templates GET y...

MAL-2026-17690 Malicious code in @galicia-toolkit/spa-build-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7fc29f59609ed2b5c7b54243b740e1daa001f3c76c4d1391edd85a528a4688 The package's postinstall script runs automatically on npm install and collects installer-side host and credential data: hostname, username, network...

CVE-2026-22019-libcurl-HTTP-2-CONNECT-Tunnel-Mixup

CVE-2026-22019 – libcurl HTTP/2 CONNECT: mezcla de túneles Código del programa simulación en C // curlhttp2tunnelmixup.c - Simulated libcurl handling CONNECT over HTTP/2 include void handlehttp2streamint streamid // Vulnerability: after CONNECT, the proxy mixes streams with the tunneled data if...

CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC PoC de ejecución remota de código en la herramienta Import/Export Data de pgAdmin 4. Aprovecha la divergencia semántica del escape de barra invertida entre el verificador de paréntesis isqueryparensbalanced y psql para inyectar \copy ... TO...

CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component

CVE-2026-22010 – Redirección de Intent de Android a Componente Exportado Código del programa simulación Java/Android // VulnActivity.java - Exported activity that forwards intents public class VulnActivity extends Activity @Override protected void onCreateBundle b super.onCreateb; Intent incoming...

Antignis

Antignis , , . . '..' / \ / ||| || '-, ,-' / /\ \ / \ \ |/ \ / | |/ / '. .:. .' / | \ | \ | | / // | \ |\ \ '|Y|' | /| /| |\ /|| // , \ / , / / // / / ,- I -, | /=\ | ,-' |=| '-, - / Enlace a la entrada del blog:...

QuickBox-Pro-2.1.8-Authenticated-RCE

QuickBox-Pro-2.1.8-Authenticated-RCE Un usuario autenticado con privilegios bajos puede explotar una vulnerabilidad de inyección de comandos para lograr ejecución de código como www-data y escalar privilegios a root debido a reglas sudo débiles. QuickBox Pro v2.1.8 y versiones anteriores son...

kernel: vsock/virtio: fix zerocopy completion for multi-skb sends

A flaw was found in the Linux kernel's vsock/virtio component. This vulnerability occurs during zerocopy completion for large messages fragmented into multiple socket kernel buffers skbs. An issue in how user arguments uargs are handled for these buffers can lead to pinned user pages not being...

NGINX_2026_CVE_Bundle_CTI_Report

🛡️ Investigación CTI Multi-CVE de NGINX 2026 CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 Creado por Pratik Chhetri Fecha del informe: 2026-07-28 📌 Resumen ejecutivo CVE| Componente| Problema principal| Versiones corregidas de código abierto| Prioridad...

hassh

"HASSH": un Método de Perfilado para Clientes y Servidores SSH. NOTA: Este repositorio de Corelight fue creado para que pueda ser mantenido activamente, a petición de Salesforce, cuyo repositorio original no está siendo mantenido. "HASSH" es un estándar de huellas digitales de red que se puede...

kyocera-cve-2022-1026_SOAP1.1

Kyocera cve-2022-1026 soap1.1 Solo pruebas autorizadas. Este proyecto se proporciona con fines educativos y de validación defensiva en entornos que usted posee o para los que tiene permiso explícito para probar. No lo utilice contra sistemas que no posea o administre. Una comprobación de exposici...

kernel: vsock/virtio: fix zerocopy completion for multi-skb sends

A flaw was found in the Linux kernel's vsock/virtio component. This vulnerability occurs during zerocopy completion for large messages fragmented into multiple socket kernel buffers skbs. An issue in how user arguments uargs are handled for these buffers can lead to pinned user pages not being...

Security Bulletin: Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection (CVE-2026-84891)

Summary Security vulnerability has been addressed in the Windows GIM component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-84891 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of hard-coded...

Security Bulletin: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

Summary Multiple vulnerabilities have been addressed in the Sniffer component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-75875 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to path traversal. CWE:CWE-22:...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...

Security Bulletin: Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection (CVE-2026-87980)

Summary Security vulnerability has been addressed in the UNIX S-TAP component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-87980 DESCRIPTION: IBM Guardium Data Protection could allow a local attacker to obtain sensitive information due to cleartext storage of...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...