120 matches found
GoogleIndexRetriever
Google index Retriever Have you ever found a webpage that seems to talk exactly about what you need, but it has been removed? Yes, Google cache is the answer but... What if the cache has been removed too? What if the site is just in Google Index page? You can not get the webpage back, but you kno...
PDFPasswordUnlocker
PDF Password Retriever using Google Colab Unlock PDF easly Have you ever forgotten the password to a crucial PDF document? Fear not! With the PDF Password Retriever, retrieving forgotten PDF passwords is now a breeze. This project leverages the power of Google Colab to provide a seamless and...
CVE-2021-26903
CVE-2021-26903 ISIDA RETRIEVER v5.2" Reflected XSS Suggested description : "ISIDA RETRIEVER v5.2" Reflected XSS. Vulnerable functionality : ISIDA RETRIEVER Platform is vulnerable to Reflected XSS. Vulnerable Parameter : query'text' Discovered : Alexander Semenenko...
-CVE-2021-26904
CVE-2021-26904 LMA ISIDA Retriever 5.2 allows SQL Injection Suggested description : "ISIDA RETRIEVER v5.2" SQL Injection Vulnerable functionality : ISIDA RETRIEVER Platform is vulnerable to SQL Injection Vulnerable URL and paramert : website.com/index.php?title=Injection Vulnerable URL and parame...
EUVD-2026-101727
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows. Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referenci...
CVE-2026-110844
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows. Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referenci...
CVE-2026-110844 n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows. Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referenci...
CVE-2026-110844
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows. Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referenci...
CVE-2026-110844 n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows. Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referenci...
CVE-2026-110844 n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows. Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referenci...
PT-2026-114158
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows. Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referenci...
GraphRAG-LTM: A Layered Threat Modeling Framework for Attacks on Graph Retrieval-Augmented Generation
Graph retrieval-augmented generation GraphRAG uses document-derived knowledge graphs to assemble evidence for large language model LLM answers. Its security depends on both the seed chunks retrieved for a query and the graph evidence assembled from them, yet attacks on this evidence path remain...
CVE-2026-110844: Incorrect Authorization
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows. Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referenci...
Backdoor in the Loop: Compromising Agentic Search Via Malicious Retrievers
Agentic retrieval-augmented generation RAG interleaves reasoning with repeated retrieval, giving the retriever influence over both the evidence an agent observes and its subsequent search decisions. We study retriever backdoors that exploit this feedback loop and repurpose weak backdoor...
cognee-community-pipeline-codify (0.1.0), cognee-community-retriever-code (0.1.0) +2 more potentially affected by CVE-2026-58473 via cognee (0.5.0)
cognee PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-pipeline-codify 0.1.0 - cognee-community-retriever-code 0.1.0 - cognee-community-tasks-codify 0.1.0 -...
cognee-community-hybrid-adapter-falkor (0.2.5), cognee-community-retriever-code (>=0.1.4, <=0.1.5) +3 more potentially affected by CVE-2026-58473 via cognee (0.5.6)
cognee PYPI version 0.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-falkor 0.2.5 - cognee-community-retriever-code =0.1.4, =0.1.4, =0.1.5 - cognee-community-vector-adapter-qdrant 0.2.4...
cognee-community-hybrid-adapter-duckdb (>=0.1.2, <=0.1.3), cognee-community-hybrid-adapter-falkor (0.2.1) +11 more potentially affected by CVE-2026-58473 via cognee (0.5.2)
cognee PYPI version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-duckdb =0.1.2, =0.1.1, =0.1.1, =0.1.1, =0.1.2 - cognee-community-tasks-scrapegraph 0.1.0 -...
Malicious code in dolyame-ui-draghoc (npm)
Source: amazon-inspector 9b2e12132d37505525293870b3a824831321d42adf75758e949b30139a002955 On require, index.js loads loader.js which selects a platform-specific asset path, fetches an unsigned binary over HTTPS from hostnames reassembled at runtime via array joins oob-worker.cf99-9b3.workers.dev,...
denser-retriever (>=0.1.1, <=0.1.3), eknowledge (>=0.1.3, <=0.1.4) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.2.10)
langchain-core PYPI version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - denser-retriever =0.1.1, =0.1.3, =0.1.0, =2026.1.201651 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...
anomaly-agent (>=0.1.0, <=0.2.0), lcrai (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.3.34)
langchain-core PYPI version 0.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - anomaly-agent =0.1.0, =0.1.1, =0.2.1, =0.4.1 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...