429612 matches found
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploi...
POC-keyv-and-cacheable-npm-Package
ChainDrop npm Supply Chain Attack — PoC Scanner & Exploit...
128 Seconds to disruption: Microsoft Defender stops ransomware at QNET
In this article 1. What is device isolation? 2. Case study: QNET 3. Attack chain overview 4. MITRE ATT&CK techniques observed 5. References 6. Learn more Microsoft Defender's attack disruption now includes device isolation, a new response action that extends autonomous protection directly to...
CVE-2026-64631
A vulnerability allowing a low-privileged user to inject SQL and extract database contents...
CVE-2026-64630
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System
Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2026-48714 DESCRIPTION: i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. In versions prior to 3.9.7, th...
CVE-2026-69252
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the /api/v1/files route was protected only by the feat:files feature gate and did not enforce checkPermission on GET or DELETE. A low-privileged authenticated API key with unrelated permission...
CVE-2026-10032
The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary...
Flowise RCE via SQLite Record Manager Node
============================================================================= Security Advisory elttam Topic: Flowise RCE via SQLite Record Manager Node Module: FlowiseAI/Flowise Disclosed: 24-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source...
GHSA-X3HF-7CJ6-3R4M Flowise RCE via SQLite Record Manager Node
============================================================================= Security Advisory elttam Topic: Flowise RCE via SQLite Record Manager Node Module: FlowiseAI/Flowise Disclosed: 24-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source...
CVE-2026-64630
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
CVE-2026-64630
Technical details (affected products, affected component, root cause, exact impact, or remedies) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-64631
A vulnerability allowing a low-privileged user to inject SQL and extract database contents...
CVE-2026-64631
A vulnerability allowing a low-privileged user to inject SQL and extract database contents...
EUVD-2026-52759
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
CVE-2026-64630
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
CVE-2026-64630
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
CVE-2026-64631
A vulnerability allowing a low-privileged user to inject SQL and extract database contents...
CVE-2026-64631
CVE-2026-64631 describes an SQL injection vulnerability exploitable by a low-privilege user that can extract database contents. According to the provided metrics, the vulnerability has HIGH base severity (CVSS 4.0, score 8.5) with network attack vector, low attack complexity, and no user interact...