Security Bulletin: Langflow OSS Authenticated Remote Code Execution (RCE) vulnerability exists in the validate_code function

Summary Langflow OSS contains a code injection vulnerability in its code validation endpoint. The endpoint executed submitted function definitions during validation, allowing decorator and default-argument expressions to run. An attacker with access to the endpoint could execute arbitrary command...

GHSA-48QF-XH34-Q73R MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters

Description When encoding a GeoJSON Polygon or MultiPolygon parameter for the binary protocol, the connector sized its output buffer from the length property of each ring, then wrote each ring only if it was a real array. The two loops disagreed: any non-array ring carrying a numeric length a...

MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters

Description When encoding a GeoJSON Polygon or MultiPolygon parameter for the binary protocol, the connector sized its output buffer from the length property of each ring, then wrote each ring only if it was a real array. The two loops disagreed: any non-array ring carrying a numeric length a...

GHSA-V383-3RW5-Q8RF enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash

Summary A crafted SVG file 1009 bytes crashes the PHP process when sanitized by enshrined/svg-sanitize any version through 0.22.x. The sanitizer's cleanAttributesOnWhitelist method calls DOMElement::removeAttribute twice on the same attribute name — first removing the explicit attribute, then...

enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash

Summary A crafted SVG file 1009 bytes crashes the PHP process when sanitized by enshrined/svg-sanitize any version through 0.22.x. The sanitizer's cleanAttributesOnWhitelist method calls DOMElement::removeAttribute twice on the same attribute name — first removing the explicit attribute, then...

AGAS

Un ataque de shilling grupal agéntico eficiente y efectivo contra sistemas de recomendación Este es el código oficial del artículo: "An Efficient and Effective Agentic Group Shilling Attack on Recommender Systems". Este artículo presenta AGAS, que es un ataque de shilling impulsado por LLM contra...

CVE-2026-67401-cPanel-EmailTrack-SQLi

CVE-2026-67401 — cPanel & WHM EmailTrack SQL Injection → Root RCE IOC Scanner, Mitigation Tool & Remediation Guide for the cPanel EmailTrack SQL Injection Vulnerability Keywords: CVE-2026-67401, cPanel exploit, cPanel SQL injection, WHM vulnerability, EmailTrack SQLi, Track Delivery SQL injection...

CVE-2021-32675

CVE-2021-32675 – Redis Denegación de Servicio por Pre-Asignación OOM Este repositorio contiene un exploit funcional para CVE-2021-32675, una vulnerabilidad de denegación de servicio DoS en Redis. La falla permite que atacantes remotos no autenticados provoquen pre-asignaciones masivas de memoria ...

CVE-2026-74586

CVE-2026-74586 — SCTP ASCONF newtransport use-after-free trigger A self-contained, unprivileged PoC for CVE-2026-74586, a use-after-free in the Linux kernel's SCTP ASCONF dynamic address reconfiguration handling. Credit for the bug itself goes to Qing Ming, who reported it upstream; the fix is...

CVE-2026-30225-OliveTin-RCE

OliveTin — ejecución de acciones no autenticada → RCE + CVE-2026-30225 PoC para escalada de privilegios / ejecución remota de código contra instancias de OliveTin que se ejecutan con los valores predeterminados de invitado incluidos. Verificado contra OliveTin 3000.10.0 ejecutándose como root HTB...

Mikrotrick_POC

Validador de Confusión de Módulo SSH para RouterOS CVE-2026-67276 Un validador conductual automatizado diseñado para detectar la vulnerabilidad de omisión de autenticación de clave pública SSH en MikroTik RouterOS CVE-2026-67276. El script comprueba si una falla de validación incompleta en el...

stylesmuggler-ioc-toolkit

StyleSmuggler IOC Toolkit — CVE-2026-75650 Magento zero-day · Adobe Commerce zero-day · CVE-2026-75650 · APSB26-146 · VULN-39341 · unauthenticated RCE · Magento malware · Magento backdoor removal · Magento 2.4.9 vulnerability · Rust implant · GraphQL styles injection · PHP web shell Community...

CVE_2023_44487-Rapid_Reset

Herramienta de Prueba de Rapid Reset HTTP/2 CVE-2023-44487 - Edición Mejorada Una herramienta integral de pruebas en Python para CVE-2023-44487 , la vulnerabilidad de Rapid Reset en HTTP/2. Esta versión mejorada proporciona control granular sobre los parámetros de prueba, múltiples patrones de...

sast-scan-action

Escaneo SAST de Offensive360 — Acción de GitHub Ejecuta un análisis completo de seguridad de aplicaciones estáticas SAST de Offensive360 en cada push o pull request. Análisis profundo de taint y flujo de datos en más de 60 lenguajes, resultados como SARIF para la pestaña de code scanning de GitHu...

netty-http-check

netty-http-check Offline checker for 23io.netty:netty-codec-http advisories 2025–2026 — the 14 CVEs in the GitHub Advisory Database, plus 9 advisories that Netty published on 2026-09-10 only in its own repository, which Dependabot cannot see. It tells you which ones you are actually exposed to, a...

PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

API deploy code generator embeds unescaped YAML fields into Python source Summary PraisonAI's API deployment generator copies deploy.api.host from agents.yaml directly into generated Python source without safe literal encoding. A malicious PraisonAI project can set that host value to a Python...

GHSA-79FV-7HQ9-W7XG PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

API deploy code generator embeds unescaped YAML fields into Python source Summary PraisonAI's API deployment generator copies deploy.api.host from agents.yaml directly into generated Python source without safe literal encoding. A malicious PraisonAI project can set that host value to a Python...

PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

Call API localhost-only authentication bypass via spoofed Host header Summary PraisonAI's patched PRAISONAICALLAUTH=disabled safeguard for the n8n/call agent invocation API can be bypassed with a spoofed Host: 127.0.0.1 header, allowing an unauthenticated network caller to list and invoke...

GHSA-2GPF-2492-Q9JH PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

Call API localhost-only authentication bypass via spoofed Host header Summary PraisonAI's patched PRAISONAICALLAUTH=disabled safeguard for the n8n/call agent invocation API can be bypassed with a spoofed Host: 127.0.0.1 header, allowing an unauthenticated network caller to list and invoke...

CVE-2026-73314

CVE-2026-73314: Unsupported PayPal signature algorithm accepted XenForo before 2.3.13 fails open when a PayPal REST webhook names an unsupported signature algorithm. What happens The webhook handler maps PAYPAL-AUTH-ALGO through a small allowlist. If the value is unknown, the mapped algorithm...