Lucene search
+L

128261 matches found

NVD
NVD
added 2026/09/10 9:17 p.m.9 views

CVE-2026-9225

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...

6.5CVSS0.00229EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/10 9:17 p.m.8 views

CVE-2026-79592

An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

7.5CVSS0.00314EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 9:17 p.m.7 views

DEBIAN-CVE-2026-79592

An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

7.5CVSS5.8AI score0.00314EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/09/10 9:16 p.m.10 views

n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...

5.3CVSS5.7AI score0.0028EPSS
SaveExploits0References6Affected Software1
Patchstack
Patchstack
added 2026/09/10 9:16 p.m.7 views

NPM: n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

NPM: n8n: Git Node branch..remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...

5.3CVSS5.7AI score0.0028EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/09/10 9:16 p.m.8 views

GHSA-QGPW-8G46-W95V n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...

5.3CVSS5.7AI score0.0028EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/10 8:51 p.m.6 views

CVE-2021-29447

CVE-2021-29447 - WordPress XXE Vulnerability Exploit Description This repository contains an exploit for CVE-2021-29447, an XXE XML External Entity vulnerability present in WordPress 5.7.0 and earlier versions. The vulnerability exists in the media library that processes WAV files, allowing an...

7.1CVSS7.1AI score0.85719EPSS
SaveExploits20
CVE
CVE
added 2026/09/10 8:44 p.m.17 views

CVE-2026-9225

IBM Langflow OSS 1.0.0 through 1.11.5 is affected by an authorization bypass (CWE-639) in the File/Read File component. When executing flows via the /api/v1/run/advanced/{flow_id} endpoint, component inputs can reference storage paths using arbitrary user or flow identifiers without verifying own...

6.5CVSS5.8AI score0.00229EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/09/10 8:44 p.m.11 views

EUVD-2026-75723

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...

6.5CVSS5.8AI score0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 8:44 p.m.32 views

CVE-2026-9225 Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...

6.5CVSS0.00229EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 8:40 p.m.8 views

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP Kernel Arbitrary Read Vulnerability + Superfetch EOP based on reacher from https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitrary-read-vulnerability/ . Exploit must be run from low integrity...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 8:17 p.m.7 views

CVE-2021-44142

CVE-2021-44142 Vulnerability Checker A tool to check if a Samba server is vulnerable to CVE-2021-44142 Background CVE-2021-44142 is a heap out-of-bounds read and write in Samba's vfsfruit module used at Pwn2Own Austin 2021 against the Western Digital PR4100. It was first discovered by Nguyễn Hoàn...

9CVSS7.4AI score0.73864EPSS
SaveExploits1
CVE
CVE
added 2026/09/10 8:08 p.m.14 views

CVE-2026-19596

An XML External Entity (XXE) vulnerability in the XML collector of OpenNMS Meridian and Horizon allows an attacker who can control the XML response collected by OpenNMS (e.g., via a compromised monitored host or HTTP man-in-the-middle) to read files accessible to the OpenNMS service account, incl...

5.9CVSS5.7AI score0.00211EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 8:08 p.m.30 views

CVE-2026-19596 OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host

An XML External Entity XXE vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Horizon. When OpenNMS collects XML from a source whose response is attacker-controlled for example a compromised monitored host or an HTTP man-in-the-middle position, the collector's...

5.9CVSS0.00211EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/10 8:08 p.m.3 views

CVE-2026-19596 OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host

An XML External Entity XXE vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Horizon. When OpenNMS collects XML from a source whose response is attacker-controlled for example a compromised monitored host or an HTTP man-in-the-middle position, the collector's...

5.9CVSS5.7AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 8:08 p.m.7 views

tomcatfileread

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — python3 CVE-2020-1938 CNVD-2020-10487 Tomcat AJP 协议文件读取 / 文件包含漏洞利用 POC 的 python3 转换版 。 原版(python2)作者: ydhcui — https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi 用法 root@kitploit: python3 "Tomcat-ROOT路径下文件包含CVE-2020-1938-python3.py" -...

9.8CVSS8.1AI score0.9927EPSS
SaveExploits51References1
Kitploit
Kitploit
added 2026/09/10 7:42 p.m.11 views

Apache-Solr-Arbitrary-File-Read

Apache Solr Arbitrary File Read Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and client libraries for many programming languages such...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:18 p.m.5 views

CVE-2021-43798

CVE-2021-43798 by Privacy Hunter Affected versions: Grafana 8.0.0-beta1 to 8.3.0 patched versions excluded Vulnerability type: Directory Traversal Severity: Critical Platform: Grafana open-source monitoring and observability platform ⚠️ Vulnerability details Directory traversal can be performed in...

7.5CVSS7.9AI score0.88503EPSS
SaveExploits45
OSV
OSV
added 2026/09/10 6:18 p.m.8 views

DEBIAN-CVE-2026-89045

zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read, allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocki...

5.1CVSS5.6AI score0.00124EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/10 6:18 p.m.7 views

CVE-2026-89045

zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read, allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocki...

5.1CVSS0.00124EPSS
SaveExploits0References6
Rows per page
Query Builder