CVE-2026-33497

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

CVE-2026-33497 Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

CVE-2026-33497 Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

CVE-2026-33497 Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

CVE-2026-33497

Langflow before 1.7.1 is affected by a path traversal in GET /profile_pictures/{folder_name}/{file_name} where folder_name and file_name are not strictly filtered, allowing an attacker to read the secret_key across directories. A patch was released in version 1.7.1; upgrading to 1.7.1 or newer mi...

CVE-2019-25627

creationtimestamp| type| source ---|---|--- 2026-03-24 13:04:08+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhsn6qacuy2p...

CVE-2019-25631

creationtimestamp| type| source ---|---|--- 2026-03-24 12:59:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhsmw6y5pt2i 2026-03-27 18:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi2p4y3k6g2a...

EUVD-2019-20010

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...

CVE-2019-25635

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...

CVE-2024-10845

creationtimestamp| type| source ---|---|--- 2026-03-24 12:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhsjmi7gam2b...

CVE-2019-25635 Zeeways Matrimony CMS Lastest SQL Injection via profile_list

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...

CVE-2019-25635

Zeeways Matrimony CMS is affected by SQL injection vulnerabilities in the profile_list endpoint, exploitable by unauthenticated attackers via the up_cast, s_mother, and s_religion parameters to manipulate database queries and exfiltrate data using time-based or error-based techniques. The CVE-201...

CVE-2019-25635 Zeeways Matrimony CMS Lastest SQL Injection via profile_list

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profilelist endpoint. Attackers can inject SQL code via the upcast, smother, and sreligion parameters to extract sensitive database information usi...

CVE-2026-27115

creationtimestamp| type| source ---|---|--- 2026-03-24 08:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhs5cw3akh2w...

CVE-2026-33847

creationtimestamp| type| source ---|---|--- 2026-03-24 07:03:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhryz42ble2q...

CVE-2026-4731

creationtimestamp| type| source ---|---|--- 2026-03-24 06:40:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrxptxwy62f...

CVE-2026-4750

creationtimestamp| type| source ---|---|--- 2026-03-24 06:23:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrwskl5b32l 2026-03-24 07:23:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhs24vtezn24...

CVE-2026-4662

creationtimestamp| type| source ---|---|--- 2026-03-24 05:25:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrtkggkyx2u...

CVE-2026-4640

creationtimestamp| type| source ---|---|--- 2026-03-24 05:25:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrtk7qoca2a 2026-03-24 07:01:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrywm3tqo2g 2026-06-11 00:37:06+00:00| seen|...

CVE-2026-4639

creationtimestamp| type| source ---|---|--- 2026-03-24 05:25:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrtjzaysb2e 2026-03-24 06:58:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhryra3c622d 2026-06-14 03:07:09+00:00| seen|...