CVE-2026-33891

creationtimestamp| type| source ---|---|--- 2026-03-24 20:59:01+00:00| published-proof-of-concept| https://github.com/digitalbazaar/forge/security/advisories/GHSA-5m6q-g25r-mvwx 2026-03-27 21:39:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi33flm56p27 2026-03-27...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the Windows cleanup routine when a crafted profile name containing PowerShell metacharacters is used. An attacker can execute arbitrary PowerShell commands with the privileges of the application process user by...

GHSA-P8MM-644P-PHMH PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution

Summary PinchTab v0.8.4 contains a Windows-only command injection issue in the orphaned Chrome cleanup path. When an instance is stopped, the Windows cleanup routine builds a PowerShell -Command string using a needle derived from the profile path. In v0.8.4, that string interpolation escapes...

CVE-2026-20687

creationtimestamp| type| source ---|---|--- 2026-03-24 19:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77047 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260325 2026-03-25 03:00:31+00:00| seen|...

USN-8121-1 linux-aws-fips vulnerability

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8098-6 linux-fips, linux-gcp-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8098-5 linux-iot, linux-kvm vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

CVE-2026-33872

creationtimestamp| type| source ---|---|--- 2026-03-24 16:25:35+00:00| seen| https://bsky.app/profile/tylerayoung.com/post/3mhsygvr4ds2l 2026-03-25 02:28:39+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mhu25cufb626 2026-03-27 21:23:14+00:00| published-proof-of-concept|...

CVE-2026-33497

creationtimestamp| type| source ---|---|--- 2026-03-24 14:44:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhssrvxwwq2p 2026-03-24 23:15:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtpdyluzh2c 2026-03-25 03:00:08+00:00| seen|...

CVE-2026-33497

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

PYSEC-2026-81

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

PYSEC-2026-81

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

CVE-2025-14915

creationtimestamp| type| source ---|---|--- 2026-03-24 14:15:07+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mhsr5mmujp2c 2026-03-24 16:35:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mhsyxw6sij2l...

CVE-2019-25629

creationtimestamp| type| source ---|---|--- 2026-03-24 13:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhsqbqobq42f 2026-03-28 05:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi3waib3ha2d...

CVE-2026-33867

creationtimestamp| type| source ---|---|--- 2026-03-24 13:53:11+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-363v-5rh8-23wg 2026-03-27 19:08:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2sw4s6x62t 2026-03-27 19:15:20+00:00| seen|...

CVE-2019-25645

creationtimestamp| type| source ---|---|--- 2026-03-24 13:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhsosjtn4t2x...

CVE-2019-25641

creationtimestamp| type| source ---|---|--- 2026-03-24 13:27:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhsoiaxpcv2g...

CVE-2019-25639

creationtimestamp| type| source ---|---|--- 2026-03-24 13:22:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhso7n7cfi2d...

CVE-2019-25647

creationtimestamp| type| source ---|---|--- 2026-03-24 13:20:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhso3s7ush2d 2026-03-26 03:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhwom3cbxu2d...

CVE-2026-33497

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...