VulnCheck KEV: CVE-2026-63077

JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol...

CVE-2026-71232: Improper Control of Generation of Code

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...

CVE-2026-17623: Improper Neutralization of Special Elements used in an OS Command

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations...

Photon OS 5.0: Erlang PHSA-2025-5.0-91-0509

An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0509. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

wp2shell-Hestia-Scanner — Updated!

🛡️ wp2shell-Hestia-Scanner 🇬🇧 English | 🇬🇷 Ελληνικά Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators across all hosted sites — with per-client email reports, core file diff, SHA256 webshell detection, risk scoring, and optional AI evaluation. ⚠️ Safe...

Incomplete List of Disallowed Inputs

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the validatePythonCodeForDataFrame process. An attacker can execute arbitrary operating system commands by submitting specially crafted Python code containing Unicod...

CVE-2026-69263 Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core.ts denied only PATH, LDLIBRARYPATH, DYLDLIBRARYPATH, and NODEOPTIONS by exact...

CVE-2026-15307

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the django.contrib.gis.gdal.GDALRaster constructor. Any value used in a spatial lookup against a GeometryField or...

Arbitrary Code Injection

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Arbitrary Code Injection via unsanitized string interpolation in the CSVAgent process. An attacker can execute arbitrary operating system commands, read sensitive files, steal credentials, and cause denial ...

Security update for valkey

This update for valkey fixes the following issues CVE-2026-56684: use-after-free in TLS connection handling bsc1272443. CVE-2026-63639: RCE via corrupt stream RDB files containing a shared NACK across consumers bsc1272442. Changes for valkey: Update to 8.0.10. Patch Instructions: To install this...

PT-2026-67827

Name of the Vulnerable Software and Affected Versions Kiro CLI versions prior to 2.10.0 Description On Windows, an uncontrolled search path element allows a remote unauthenticated actor to execute arbitrary code. This occurs when a local user starts the application in a maliciously crafted projec...

PT-2026-67721

Name of the Vulnerable Software and Affected Versions Perspective version 5.0.0 Description An issue exists in the PolarsVirtualServer backend where unauthenticated attackers can execute arbitrary operating system commands. This occurs because client-supplied input is passed directly to the Pytho...

PT-2026-67906

Summary Flowise's CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that is then executed by Pyodide. Because Pyodide is loaded with the default js bridge to globalThis which on Node.js exposes eval and dynamic import, the...

PT-2026-67848

Name of the Vulnerable Software and Affected Versions MaxSite CMS affected versions not specified Description An issue exists where unauthenticated attackers can execute arbitrary code by providing malicious serialized data through the maxsite comuser cookie. The application passes this data...

PT-2026-67767

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3 Description An authenticated user with permissions to create or modify a chatflow can achieve remote code execution via the CSVAgent node. The node allows users to provide Python code executed through pyodide,...

VulnCheck KEV: CVE-2026-9198

Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments...

PYSEC-2026-3981

GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other dangerous config keys into the victim's .git/config via...

PYSEC-2026-3981

GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other dangerous config keys into the victim's .git/config via...

PT-2026-70011

Уязвимость функции index local file headers within bounds файла libclamav/unzip.c пакета антивирусных программ ClamAV связана с записью за границами буфера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код и вызвать отказ в обслуживании...

CVE-2026-66065: External Control of System or Configuration Setting

Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. Versions prior to 0.42.1 have an incomplete denylist. Several execution-routing keys of the same RCE class were omitted, so a malicious cloned repo can still...