267461 matches found
kube-alien
Kube-alien Esta herramienta lanza ataques a un clúster de k8s desde dentro. Esto significa que ya necesitas tener acceso con permisos para desplegar pods en un clúster para ejecutarlo. Después de ejecutar el pod kube-alien, intenta tomar el control de los nodos del clúster añadiendo tu clave...
CVE-2026-108521
A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be execute...
EUVD-2026-96728
A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be execute...
CVE-2026-108521
A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be execute...
CVE-2026-108521 Studio-Saelix Sencho Add Remote Node API Endpoint validation.ts isValidRemoteUrl server-side request forgery
A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be execute...
CVE-2026-108521
A server-side request forgery (SSRF) vulnerability exists in Studio-Saelix Sencho up to version 0.97.1 . The flaw is located in the isValidRemoteUrl function within the backend/src/utils/validation.ts file of the Add Remote Node API Endpoint component. An authenticated user with node-management p...
PT-2026-110000
Name of the Vulnerable Software and Affected Versions Studio-Saelix Sencho versions prior to 0.97.1 Description An issue exists in the Add Remote Node API Endpoint component within the isValidRemoteUrl function of the backend/src/utils/validation.ts file. An authenticated user with node-managemen...
CVE-2026-108521: Server-Side Request Forgery (SSRF)
A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be execute...
TJ Sweet NornicDB Authorization Issue Vulnerability
TJ Sweet NornicDB versions 1.4.1 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of authorization verification, which may allow authenticated users to bypass the database-read restriction on the /nornicdb/search and /nornicdb/similar endpoints, thereby...
Studio Saelix sencho: Server-side request forgeing vulnerability
The Studio Saelix sencho version 0.97.1 and earlier have a vulnerability related to server-side request forgery. This vulnerability stems from an improper handling of the isValidRemoteUrl function in the Add Remote Node API Endpoint component’s file backend/src/utils/validation.ts, which may lead...
CLEANSTART-2026-WQ57652 node-csv is a full-featured CSV parser with a simple API that is tested against large datasets
Security vulnerability affects the n8n package. node-csv is a full-featured CSV parser with a simple API that is tested against large datasets...
CLEANSTART-2026-VM09695 toml-node is a TOML parser for Node
Security vulnerability affects the n8n package. toml-node is a TOML parser for Node...
CLEANSTART-2026-US61275 fast-uri is a URI parser for Node
Security vulnerability affects the n8n package. fast-uri is a URI parser for Node...
CLEANSTART-2026-SV74760 vm2 is an open source vm/sandbox for Node
Security vulnerability affects the n8n package. vm2 is an open source vm/sandbox for Node...
CLEANSTART-2026-GB44071 toml-node is a TOML parser for Node
Security vulnerability affects the n8n package. toml-node is a TOML parser for Node...
CLEANSTART-2026-RL65509 vm2 is a sandbox for running untrusted Node
Security vulnerability affects the n8n package. vm2 is a sandbox for running untrusted Node...
MAL-2026-17864 Malicious code in passwordcracker (npm)
passwordcracker poses as a dependency-free Discord MFA library but pulls node-net-pool from the attacker's GitHub repo lunexindonesia/node-net-pool, and on load lib/cache.js runs trymodule'require'catch to execute it. On Windows, that index.js downloads a script from a limbomail.com attachment UR...
Malicious code in passwordcracker (npm)
passwordcracker poses as a dependency-free Discord MFA library but pulls node-net-pool from the attacker's GitHub repo lunexindonesia/node-net-pool, and on load lib/cache.js runs trymodule'require'catch to execute it. On Windows, that index.js downloads a script from a limbomail.com attachment UR...