Lucene search
+L

108716 matches found

Github Security Blog
Github Security Blog
added yesterday6 views

Open WebUI: Users denied the image-generation permission can still generate images via chat completions

Summary An authenticated user whose features.imagegeneration permission has been revoked can still make the server generate images by sending the feature flag in a chat-completion request. The chat pipeline took the client-supplied features object at face value and never re-checked the permission...

4.3CVSS5.4AI score
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-47764

A flaw was found in pdm, a Python package and dependency manager. This vulnerability allows a remote attacker to write arbitrary files to a system by crafting a malicious Python 'wheel' package. The flaw occurs during the installation process, where a critical function responsible for writing fil...

8.4CVSS5.9AI score0.00047EPSS
SaveExploits0References2
EUVD
EUVD
added yesterday6 views

EUVD-2026-52911

An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user opens the...

8.5CVSS6.1AI score
SaveExploits0References2
Cvelist
Cvelist
added yesterday26 views

CVE-2026-70552 MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php

MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX dispatcher that allows unauthenticated attackers to access admin-gated endpoints by supplying any X-Requested-With header and requesting a base64-encoded path resolving to any -ajax.php file in the codebase...

9.8CVSS
SaveExploits0References3
EUVD
EUVD
added yesterday7 views

EUVD-2026-52909

MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX dispatcher that allows unauthenticated attackers to access admin-gated endpoints by supplying any X-Requested-With header and requesting a base64-encoded path resolving to any -ajax.php file in the codebase...

9.8CVSS5.5AI score
SaveExploits0References3
CVE
CVE
added yesterday21 views

CVE-2026-70552

MaxSite CMS

9.8CVSS5.5AI score
SaveExploits0References3
NVD
NVD
added yesterday8 views

CVE-2026-47764

pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through writetofs. InstallDestination.writetofs in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces t...

8.4CVSS0.00047EPSS
SaveExploits0References2
NVD
NVD
added yesterday5 views

CVE-2026-47763

pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...

6.8CVSS0.00024EPSS
SaveExploits0References2
CVE
CVE
added yesterday31 views

CVE-2026-47764

Summary of CVE-2026-47764 (pdm) : A path-traversal vulnerability in wheel installation arises from InstallDestination.write_to_fs() in src/pdm/installers/installers.py, where a safe validation helper (_path_with_destdir()) was replaced with a bare os.path.join(), removing path validation. Version...

8.4CVSS5.5AI score0.00047EPSS
SaveExploits0References2
Cvelist
Cvelist
added yesterday37 views

CVE-2026-47764 pdm: Path traversal in wheel installation via overridden write_to_fs

pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through writetofs. InstallDestination.writetofs in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces t...

8.4CVSS0.00047EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added yesterday2 views

CVE-2026-47763 pdm: Project-Local State and Config Writes Follow Symlinks

pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...

6.8CVSS5.5AI score0.00024EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-44705

A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the...

8.7CVSS7AI score0.00354EPSS
SaveExploits1References4
CVE
CVE
added yesterday12 views

CVE-2026-47613

NVIDIA Dynamo for Linux contains a vulnerability (CVE-2026-47613) where a crafted local path in a multimodal request can improperly limit a pathname to a restricted directory, potentially leading to information disclosure. The NVIDIA security bulletin indicates affected versions 0 to v1.1.0 with ...

7.5CVSS5.4AI score
SaveExploits0References3
Cvelist
Cvelist
added yesterday26 views

CVE-2026-47613

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure...

7.5CVSS
SaveExploits0References3
EUVD
EUVD
added yesterday6 views

EUVD-2026-52805

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure...

7.5CVSS5.4AI score
SaveExploits0References3
CVE
CVE
added yesterday10 views

CVE-2026-47612

Summary: NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory, potentially leading to information disclosure. The CVSSv3.1 base score is 7.5 (High) with network attack vector and no ...

7.5CVSS5.5AI score
SaveExploits0References3
NVD
NVD
added yesterday8 views

CVE-2026-69259

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additionalConfig and spread it after the intended...

9.4CVSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added yesterday6 views

CVE-2026-69259

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additionalConfig and spread it after the intended...

9.4CVSS5.7AI score
SaveExploits0References5Affected Software1
EUVD
EUVD
added yesterday7 views

EUVD-2026-52765

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additionalConfig and spread it after the intended...

9.4CVSS5.7AI score
SaveExploits0References4
OSV
OSV
added yesterday5 views

GHSA-X3HF-7CJ6-3R4M Flowise RCE via SQLite Record Manager Node

============================================================================= Security Advisory elttam Topic: Flowise RCE via SQLite Record Manager Node Module: FlowiseAI/Flowise Disclosed: 24-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source...

9.4CVSS5.8AI score
SaveExploits0References5
Rows per page
Query Builder