Lucene search
+L

137813 matches found

OSV
OSV
added 2026/07/23 6:1 a.m.9 views

RLSA-2026:41899 Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18...

8.8CVSS8.2AI score0.01105EPSS
SaveExploits0References18
RedHat Linux
RedHat Linux
added 2026/07/23 5:45 a.m.8 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.69 security and extras update

Red Hat OpenShift Container Platform release 4.13.69 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Low...

8.7CVSS7.2AI score0.00656EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/07/23 3:46 a.m.61 views

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Langflow

CVE-2026-0770: Langflow execglobals Remote Code Execution...

9.8CVSS7.2AI score0.56878EPSS
SaveExploits9
GithubExploit
GithubExploit
added 2026/07/23 3:45 a.m.64 views

Exploit for SQL Injection in Ivanti Endpoint_Manager

CVE-2024-50330: Ivanti Endpoint Manager EPM SQL Injection to...

9.8CVSS7.3AI score0.40512EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.16 views

PT-2026-64048

Summary PhpSpreadsheet's OLE reader follows sector chains from attacker-controlled XLS/OLE metadata without detecting cycles or enforcing a maximum chain length. A tiny malformed .xls/OLE file can set the small-block depot sector chain to point back to itself. During normal XLS detection,...

7.5CVSS5.4AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.12 views

PT-2026-64127

Affected: praisonai-platform PyPI CWE-287 Improper Authentication Overview GHSA-3qg8-5g3r-79v5 Critical reported that praisonai-platform's JWT signing secret defaulted to the hardcoded literal "dev-secret-change-me", and that the production guard meant to prevent this was default-open it only...

9.8CVSS5.7AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.17 views

PT-2026-64126

praisonai-platform: default JWT signing secret dev-secret-change-me Researcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security Research Target: https://github.com/MervinPraison/PraisonAI --- Package: praisonai-platform on PyPI Latest version and version tested: 0.1.4,...

9.8CVSS5.5AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.20 views

PT-2026-64116

PraisonAI LinearBot processes unsigned webhooks when LINEAR WEBHOOK SECRET is missing Summary PraisonAI's LinearBot starts a public webhook listener on 0.0.0.0 and treats LINEAR WEBHOOK SECRET as optional. When the secret is absent, startup only logs a warning and handle webhook skips...

8.6CVSS6.4AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.23 views

PT-2026-64133

SpiderTools redirect-target SSRF protection bypass Summary SpiderTools.scrape page validates the initial URL and rejects direct loopback, private, link-local, metadata, and internal hostnames. It then calls requests.Session.get without disabling automatic redirects or validating redirect Location...

6.5CVSS6.4AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.16 views

PT-2026-64137

PraisonAI AgentTeam.launch exposes unauthenticated remote agent invocation endpoints Summary PraisonAI's documented Python AgentTeam.launch / Agents.launch HTTP server starts externally reachable agent invocation endpoints without any authentication enforcement. The current implementation registe...

9.8CVSS6AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.18 views

PT-2026-64118

praisonai: recipe serve authentication middleware silently disables itself when no secret is set Researcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security Research Target: https://github.com/MervinPraison/PraisonAI --- Package: praisonai on PyPI Version tested: 4.6.48...

9.8CVSS6.2AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.23 views

PT-2026-64132

Summary A Server-Side Request Forgery SSRF vulnerability in the SearxNG / search web search tools allows an attacker to make the server perform requests to arbitrary internal endpoints and read the responses back. The searxng url argument is passed directly to requests.get with no validation of...

8.8CVSS5.6AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.12 views

PT-2026-64117

PraisonAI Code agent tools fail open without a workspace boundary Summary PraisonAI Code's agent-compatible CODE TOOLS wrappers keep a global workspace root initialized to None. If an application uses CODE TOOLS, code read file, code search replace, or code apply diff before calling set workspace...

7.3CVSS5.8AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.18 views

PT-2026-64120

Summary An unauthenticated attacker can read arbitrary files on the server by supplying an absolute filesystem path in the agent file field of the Jobs API. The field has no path validation, no allowlist, and no authentication is required to submit jobs. Details The agent file field in...

7.5CVSS5.6AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:0 a.m.10 views

RockyLinux 8 : .NET 9.0 (RLSA-2026:41899)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41899 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

9.8CVSS7.6AI score0.01105EPSS
SaveExploits0References35
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:0 a.m.9 views

RockyLinux 10 : .NET 8.0 (RLSA-2026:41893)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41893 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

9.8CVSS7.6AI score0.01105EPSS
SaveExploits0References35
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:0 a.m.7 views

RockyLinux 10 : .NET 10.0 (RLSA-2026:41897)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41897 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

9.8CVSS7.6AI score0.01105EPSS
SaveExploits0References33
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:0 a.m.9 views

RHEL 10 : .NET 8.0 (RHSA-2026:41893)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41893 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

9.8CVSS7.6AI score0.01105EPSS
SaveExploits0References36
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:0 a.m.8 views

RHEL 9 : .NET 9.0 (RHSA-2026:41896)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41896 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

9.8CVSS7.6AI score0.01105EPSS
SaveExploits0References36
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:0 a.m.12 views

RHEL 8 : .NET 10.0 (RHSA-2026:41900)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41900 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

9.8CVSS7.6AI score0.01105EPSS
SaveExploits0References36
Rows per page
Query Builder