CVE-2026-8476: Deserialization of Untrusted Data

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pickle.loads function to deserialize cached objects from disk without validation, integrity verification, or...

Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion

Summary A Path Traversal vulnerability allows any user or attacker supplying an untrusted statetoken through the UI stream payload to arbitrarily target files on the disk under the standard file-based runtime backend. This can result in application denial of service via crash loops when reading...

Invoke-CradleCrafter - PowerShell Remote Download Cradle Generator and Obfuscator

Invoke-CradleCrafter is a PowerShell v2.0+ compatible PowerShell remote download cradle generator and obfuscator. Purpose Invoke-CradleCrafter exists to aid Blue Teams and Red Teams in easily exploring, generating and obfuscating PowerShell remote download cradles. In addition, it helps Blue Team...

Computer Associates ARCserve D2D Detection

The remote web server is part of ARCserve D2D, a disk-based backup product from Computer Associates. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55719; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Computer Associates ARCserve D2D...

Symantec Backup Exec System Recovery 8.5 - Kernel Pointers Dereferences 0day

No description provided by source. include stdio.h include windows.h include winioctl.h include stdlib.h include string.h / Program : Symantec Backup Exec System Recovery 8.5 - 0day Homepage : http://www.symantec.com Discovery : 2009/12/23 Author Contacted : 2011/04/01 - No reply Author Contacted...

Data Protection Manager 2006

Data Protection Manager 2006DPMis designed specifically for disk-based backup. DPM, the newest member of the Microsoft Windows Server System focuses on disk-based data protection and recovery. DPM installs on Microsoft Windows Server 2003 SP1 and protects servers running Microsoft Windows 2000...