Lucene search
+L

259126 matches found

ATTACKERKB
ATTACKERKB
added last week12 views

CVE-2026-66066

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...

9.5CVSS6.8AI score0.01701EPSS
SaveExploits6References10Affected Software1
OSV
OSV
added last week8 views

GHSA-XR9X-R78C-5HRM Active Storage has possible arbitrary file read and remote code execution in Active Storage variant processing

Impact In its default configuration, a Rails application that displays image variants may allow an unauthenticated attacker to read arbitrary files from the server, including the process environment. That environment typically holds secretkeybase and often credentials for external systems, which...

9.5CVSS6.8AI score0.01701EPSS
SaveExploits6References11
Github Security Blog
Github Security Blog
added last week9 views

Active Storage has possible arbitrary file read and remote code execution in Active Storage variant processing

Impact In its default configuration, a Rails application that displays image variants may allow an unauthenticated attacker to read arbitrary files from the server, including the process environment. That environment typically holds secretkeybase and often credentials for external systems, which...

9.5CVSS6.8AI score0.01701EPSS
SaveExploits6References11Affected Software1
EUVD
EUVD
added last week10 views

EUVD-2026-51268

Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rendering contexts via crafted Studio component or theme schema...

9CVSS6.3AI score0.00522EPSS
SaveExploits0References3
Cvelist
Cvelist
added last week35 views

CVE-2026-18245 Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react

Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rendering contexts via crafted Studio component or theme schema...

9CVSS0.00522EPSS
SaveExploits0References3
EUVD
EUVD
added last week10 views

EUVD-2026-51267

SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...

6.1AI score0.00981EPSS
SaveExploits0References2
Cvelist
Cvelist
added last week38 views

CVE-2026-15969 CVE-2026-15969

SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...

0.00981EPSS
SaveExploits0References2
CVE
CVE
added last week84 views

CVE-2026-15969

SGLang (CVE-2026-15969) exposes an unauthenticated RCE via /load_lora_adapter_from_tensors caused by bypassing SafeUnpickler’s incomplete denylist, enabling arbitrary command execution through crafted base64-encoded pickle payloads. Multiple sources confirm the vulnerability and its impact on SGL...

9.8CVSS6.1AI score0.00981EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added last week5 views

CVE-2026-15969 CVE-2026-15969

SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...

9.8CVSS6.1AI score
SaveExploits0References4
EUVD
EUVD
added last week10 views

EUVD-2026-51264

SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load..., weightsonly=False fallback enables pickle deserialization of .bin files...

5.9AI score0.00332EPSS
SaveExploits0References2
CVE
CVE
added last week46 views

CVE-2026-15976

CVE-2026-15976 affects SGLang. The vulnerability is an RCE that occurs when loading model weights from a HuggingFace repository via the /update_weights_from_disk path, where torch.load(..., weights_only=False) may deserialize pickle payloads from .bin files. This is tied to the pickle-deserializa...

9.8CVSS5.9AI score0.00332EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added last week43 views

CVE-2026-15976 CVE-2026-15976

SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load..., weightsonly=False fallback enables pickle deserialization of .bin files...

0.00332EPSS
SaveExploits0References2
Cvelist
Cvelist
added last week38 views

CVE-2026-15971 CVE-2026-15971

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPERSERVERPORT is set, enabling code execution on inference requests...

0.00403EPSS
SaveExploits0References2
EUVD
EUVD
added last week14 views

EUVD-2026-51262

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPERSERVERPORT is set, enabling code execution on inference requests...

6.3AI score0.00403EPSS
SaveExploits0References2
CVE
CVE
added last week55 views

CVE-2026-15971

SGLang contains a remote code execution vulnerability (CVE-2026-15971) that triggers when the optional dumper subsystem is enabled. The root cause is a sandbox escape via DUMPER_SERVER_PORT, enabling code execution on inference requests. Multiple sources (NVD, CVE lists, OSV, etc.) consistently d...

9.8CVSS6.3AI score0.00403EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added last week5 views

CVE-2026-15971 CVE-2026-15971

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPERSERVERPORT is set, enabling code execution on inference requests...

9.8CVSS6.3AI score
SaveExploits0References4
NVD
NVD
added last week10 views

CVE-2026-12940

IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP Model Context Protocol stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUSENVVARS blocklist fails to include...

9.8CVSS0.00478EPSS
SaveExploits1References1
OSV
OSV
added last week4 views

CVE-2026-12940

IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP Model Context Protocol stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUSENVVARS blocklist fails to include...

9.8CVSS6.3AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.6 views

SUSE CVE-2026-17836

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6.1AI score0.00303EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:4 p.m.6 views

SUSE CVE-2026-17881

Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6.2AI score0.00418EPSS
SaveExploits0References3
Rows per page
Query Builder