CVE-2026-54687

n8n-nodes-sqlite3 (versions

CVE-2026-54687 n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

CVE-2026-54687 n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

EUVD-2026-67158

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

CVE-2026-54687 n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

CVE-2026-54713 CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisions

CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager::getUniqueId generates identifiers for jobs with shouldBeUnique enabled from the job class, method, and parameters, but sorting parameter values drops associative-array keys. An unauthenticated...

CVE-2026-54713 CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisions

CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager::getUniqueId generates identifiers for jobs with shouldBeUnique enabled from the job class, method, and parameters, but sorting parameter values drops associative-array keys. An unauthenticated...

CVE-2026-54713 CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisions

CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager::getUniqueId generates identifiers for jobs with shouldBeUnique enabled from the job class, method, and parameters, but sorting parameter values drops associative-array keys. An unauthenticated...

CVE-2026-54713

CakePHP Queue (a queue-interop compatible queueing library) has an incomplete comparison in QueueManager::getUniqueId() that affects versions 0.1.11 through 2.3.1 . When shouldBeUnique is enabled, the method generates job identifiers from the job class, method, and parameters, but sorting paramet...

EUVD-2026-67241

CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager::getUniqueId generates identifiers for jobs with shouldBeUnique enabled from the job class, method, and parameters, but sorting parameter values drops associative-array keys. An unauthenticated...

CVE-2024-34471

CVE-2024-34471 Beschreibung: Ein authentifizierter Benutzer kann eine Path-Traversal-Schwachstelle die bei Schreibrechten zu einer Dateilöschung führt in der Datei mliRealtimeEmails.php ausnutzen. Der Dateiname-Parameter in der Export-HTML-Funktion validiert den Dateispeicherort nicht...

CVE-2024-34470

CVE-2024-34470 Beschreibung: Ein nicht authentifizierter Benutzer kann eine Pfad-Traversal-Schwachstelle in der Datei /public/loader.php ausnutzen. Der Parameter path filtert nicht ordnungsgemäß, ob die übergebenen Dateien und Verzeichnisse Teil des Webroot sind, sodass ein Angreifer beliebige...

BlueKeep

rdpscan für die CVE-2019-0708 Bluekeep-Sicherheitslücke Dies ist ein schneller und einfacher Scanner für die Sicherheitslücke CVE-2019-0708 in Microsoft Remote Desktop. Derzeit gibt es etwa 700.000 Maschinen im öffentlichen Internet, die für diese Sicherheitslücke verwundbar sind, verglichen mit...

CVE-2022-26937

Crash PoC del File System di Rete Windows CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical dat...

mora-hwbp

Mora-HWBP — AMSI / WLDP / ETW Telemetrie-Hooking über Hardware-Breakpoints Ein Proof-of-Concept POC aus der Sicherheitsforschung, das auf Hardware-Breakpoints CPU-Debug-Register basierendes Funktions-Hooking als Alternative zum herkömmlichen In-Memory-Code-Patching demonstriert. Zweck & Umfang...

CVE-2026-5680

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

CVE-2024-11467

CVE-2024-11467 macOS ऑपरेटिंग सिस्टम विभिन्न प्रक्रियाओं के बीच मूल अंतर-प्रक्रिया संचार के लिए XPC सेवाओं का उपयोग करता है, जैसे कि XPC सेवा डेमन और तृतीय-पक्ष एप्लिकेशन के विशेषाधिकार प्राप्त सहायक उपकरणों के बीच। VMware Horizon Client, स्थापना के दौरान, /Library/PrivilegedHelperTools/ निर्देशि...

CVE-2019-9081_PoC

CVE-2019-9081poc PoC für CVE-2019-9081; diese CVE ist lediglich eine neue POP-Kette. Das Projekt ist eine vorgefertigte verwundbare Laravel 5.7.x-Anwendung mit einem Einstiegspunkt für die POI-Sicherheitslücke unter der URI /deserialize POST-Anfrage. Lab-Einrichtung: Starten der verwundbaren...

CVE-2003-0264

SLMail 5.5 POP3 PASS Parameter Buffer Overflow Versione del programma: SLMail 5.5 Vulnerabilità: overflow del buffer nel parametro PASS del servizio POP3 porta 110 di Seattle Lab Mail SLMail 5.5 Testato su: Windows 7 x86 Sfruttamento: overflow del buffer remoto Video PoC:...

Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images

Summary Multiple vulnerabilities were addressed in IBM MQ Agent images Vulnerability Details CVEID:CVE-2026-62995 DESCRIPTION: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWT...