13205 matches found
AZL-80972 CVE-2026-32241 affecting package flannel for versions less than 0.24.2-26
Flannel is a network fabric for containers, designed for Kubernetes. The Flannel project includes an experimental Extension backend that allows users to easily prototype new backend types. In versions of Flannel prior to 0.28.2, this Extension backend is vulnerable to a command injection that...
CVE-2026-32950
SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution RCE, allowing any authenticated user even the...
CVE-2026-23882 Blinko: Admin RCE - MCP Server Command Injection
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP Model Context Protocol server creation function allows specifying arbitrary commands and arguments, which are executed when testing the connection. This issue has been patched in version 1.8.4...
Langflow Unauth RCE
Langflow versions prior to 1.9.0 are susceptible to unauthenticated remote code execution through the /api/v1/buildpublictmp//flow endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. Module Options msf use...
com.codbex.atlas:codbex-atlas-application (>=2.62.0, <=2.126.0), com.codbex.gaia:codbex-gaia-application (>=2.61.0, <=2.111.0) +25 more potentially affected by CVE-2026-33349 via org.webjars.npm:fast-xml-parser (>=4.5.3, <=5.8.0)
org.webjars.npm:fast-xml-parser MAVEN version =4.5.3, =2.62.0, =2.61.0, =2.52.0, =2.52.0, =2.51.0, =2.51.0, =3.6.0, =2.50.0, =5.0.0, =5.0.0, =11.58.0, =12.2.0, =11.58.0, =11.58.0, =14.19.0, =14.40.0 and more Source cves: CVE-2026-33349 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15699648...
Malicious code in rce-pkg-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00722c1eda950154ab61163515f1ee91bd18cd2be33793e0bf446884abc30771 The package rce-pkg-1 was found to contain malicious code...
MAL-2026-1834 Malicious code in rce-pkg-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e2ccfc70214b187f4ea10c848cbc319a6c508e555a0fc4eb820f3e4670c4b2 The package rce-pkg-2 was found to contain malicious code...
Malicious code in rce-pkg-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e2ccfc70214b187f4ea10c848cbc319a6c508e555a0fc4eb820f3e4670c4b2 The package rce-pkg-2 was found to contain malicious code...
MAL-2026-1833 Malicious code in rce-pkg-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00722c1eda950154ab61163515f1ee91bd18cd2be33793e0bf446884abc30771 The package rce-pkg-1 was found to contain malicious code...
CVE-2026-28674
Product/Context: xiaoheiFS (self-hosted financial/operational system). Vulnerability: In versions ≤ 0.3.15, the AdminPaymentPluginUpload endpoint allows admins to upload any file to plugins/payment/ with only a hardcoded password (qweasd123456) and disregards file content. A background watcher (S...
CVE-2026-2462
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, and 10.11.x
PT-2026-25811
🚨 FRESH TOP THREAT ALERT 🚨 Critical RCE in Apache Tomcat March 16, 2026: CVE-2026-89102 – CVSS 9.8! Unauthenticated attackers can send one crafted request to trigger a deserialization flaw and execute arbitrary code on the server. Hits thousands of Java web apps worldwide. Remediation: Upgrade...
@apollo/gateway (>=2.11.0-preview.0, <=2.11.5), @dfanchon/gateway (2.11.0) +1 more potentially affected by CVE-2026-32621 via @apollo/query-planner (>=2.11.0, <=2.11.5-preview.1)
@apollo/query-planner NPM version =2.11.0, =2.11.0-preview.0, =11.1.14, =11.2.0 Source cves: CVE-2026-32621 Source advisory: OSV:GHSA-PFJJ-6F4P-RVMH...
PT-2026-24662
Name of the Vulnerable Software and Affected Versions mlflow/mlflow versions prior to 3.10.0 Description An unauthenticated remote attacker can read arbitrary files from the server's filesystem. The issue occurs in the create model version handler of mlflow/server/handlers.py when a...
The Zero-Day Scramble is Avoidable: A Guide to Attack Surface Reduction
You can't control when the next critical vulnerability drops. You can control how much of your environment is exposed when it does. The problem is that most teams have more internet-facing exposure than they realise. Intruder's Head of Security digs into why this happens and how teams can manage ...
CVE-2026-28695 Craft affected by authenticated RCE via Twig SSTI - create() function + Symfony Process gadget
Craft is a content management system CMS. There is an authenticated admin RCE in Craft CMS 5.8.21 via Server-Side Template Injection using the create Twig function combined with a Symfony Process gadget chain. The create Twig function exposes Craft::createObject, which allows instantiation of...
📄 WordPress AI Buddy 1.8.5 Shell Upload
Proof of concept exploit for a shell upload vulnerability in WordPress AI Buddy plugin versions 1.8.5 and below. This exploit is written in PHP. ============================================================================================================================================= | Title :...
📄 WordPress Project Notebooks 1.1.4 Remote Code Execution
Proof of concept exploit for the WordPress Project Notebooks plugin version 1.1.4 remote code execution vulnerability that allows for privilege escalation through improper validation of AJAX actions and nonce exposure...
@internxt/cli (>=1.0.5, <=1.2.2), @latitude-data/cli (>=0.0.29, <=1.11.0-canary.8) +10 more potentially affected by unknown CVE via serialize-javascript (>=7.0.0, <=7.0.2)
serialize-javascript NPM version =7.0.0, =1.0.5, =0.0.29, =0.7.5, =1.3.0, =0.1.0, =1.0.7, =0.2.0, =0.7.0-alpha.6 Source cves: unknown CVE Source advisory: OSV:GHSA-5C6J-R48X-RMVQ...
PT-2026-21844
Name of the Vulnerable Software and Affected Versions OliveTin versions up to and including 3000.10.0 Description OliveTin, a tool designed to simplify shell command execution, has flaws in its shell command execution mechanism. The checkShellArgumentSafety function does not block the password...