5234 matches found
Incomplete List of Disallowed Inputs
Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the Twig sandbox security policy, which permits database write operations even when safe mode is enabled. An attacker with Developer permissions can modify, insert, or delete data in any database...
CVE-2025-41029
creationtimestamp| type| source ---|---|--- 2026-04-21 17:18:19+00:00| published-proof-of-concept| Telegram/Dp3cHxEcbabtcr78eMwYzIZdIkaK3NXYlVFRQJBCFObozHI...
CVE-2026-40498
creationtimestamp| type| source ---|---|--- 2026-04-21 17:18:19+00:00| published-proof-of-concept| Telegram/Dp3cHxEcbabtcr78eMwYzIZdIkaK3NXYlVFRQJBCFObozHI...
GHSA-98HH-7GHG-X6RQ
creationtimestamp| type| source ---|---|--- 2026-04-21 01:19:10+00:00| published-proof-of-concept| Telegram/LrBuhuc7HcH3kswc1a1az3fvuC6rURNPubqOsu4a3yYkj38...
GHSA-M6RX-7PVW-2F73
creationtimestamp| type| source ---|---|--- 2026-04-21 01:18:26+00:00| published-proof-of-concept| Telegram/Ww620GgPpyXrrMPbpNwPksYQUctI-RNYBJrVLxtJIutZ-I...
GHSA-HX6P-XPX3-JVVV
creationtimestamp| type| source ---|---|--- 2026-04-20 19:17:56+00:00| published-proof-of-concept| Telegram/lEx4szWN0qGJp6nrTUnjGPs2FeG4zgfzAhM3YBb6L1MKYlY...
CVE-2025-68999
creationtimestamp| type| source ---|---|--- 2026-04-20 15:00:14+00:00| published-proof-of-concept| Telegram/53o12YGO39erxH5EJyUJZtM8GsOkKfuR8VnPBM0vnG45d3o 2026-04-20 21:00:04+00:00| published-proof-of-concept| Telegram/6gIQNhEdswOzMzvPm3IEV7XQ1TbB50UOuWiI2PaotUmzjw 2026-08-22 19:00:05+00:00| see...
CVE-2026-3517
creationtimestamp| type| source ---|---|--- 2026-04-20 11:13:25+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-371 2026-04-20 15:52:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwt7avbvg2e 2026-04-20 17:21:16+00:00| seen|...
CVE-2026-39533
creationtimestamp| type| source ---|---|--- 2026-04-20 08:37:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjw2u3mpop2x...
CVE-2026-42086
creationtimestamp| type| source ---|---|--- 2026-04-20 03:12:34+00:00| published-proof-of-concept| https://github.com/OpenC3/cosmos/security/advisories/GHSA-ffq5-qpvf-xq7x...
CVE-2026-6582
A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function getvectordbdetails of the file superagi/controllers/vectordbs.py of the component Vector Database Management Endpoint. Executing a manipulation can lead to missing authentication. The attack...
CVE-2026-32963
creationtimestamp| type| source ---|---|--- 2026-04-19 19:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU94271449 2026-04-21 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-10...
GHSA-526V-VM72-4V64
creationtimestamp| type| source ---|---|--- 2026-04-18 05:18:34+00:00| published-proof-of-concept| Telegram/veDSMFN7ecyhltWdKUwpcYAyE-ogEw-qfchv6YBZH7Zn1oc...
GHSA-CP2J-RWH4-R46F
creationtimestamp| type| source ---|---|--- 2026-04-18 05:18:34+00:00| published-proof-of-concept| Telegram/veDSMFN7ecyhltWdKUwpcYAyE-ogEw-qfchv6YBZH7Zn1oc...
GHSA-XJX3-GJH9-45FM
creationtimestamp| type| source ---|---|--- 2026-04-18 03:16:44+00:00| published-proof-of-concept| Telegram/uiCSDEnb8aQmWF7FrTZmjJQGi4eEk-7sLrqhzwnkCLApk...
GHSA-HC37-VX3W-34FG
creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:19+00:00| published-proof-of-concept| Telegram/lPGIWgtQcs4RDQrNkGM74AEu7FEWLIcUMs54pp3qHTSOJE...
GHSA-MCFQ-8RX7-W25V
creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:19+00:00| published-proof-of-concept| Telegram/lPGIWgtQcs4RDQrNkGM74AEu7FEWLIcUMs54pp3qHTSOJE...
CVE-2026-40323
creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:04+00:00| published-proof-of-concept| Telegram/u5f3Gra6Haipf3VJEB4yu-gwc95-0FLxvYnhbIvKSTo7fn8...