5742 matches found
CVE-2026-111321 TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in Actions
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers0.url in a user-defined action. Attackers holding a project API key or console admin login c...
CVE-2026-111321 TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in Actions
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers0.url in a user-defined action. Attackers holding a project API key or console admin login c...
CVE-2026-111321
The software TaskingAI versions up to and including 0.3.0 is vulnerable to a Server-Side Request Forgery (SSRF) flaw. The root cause is the processing of an unvalidated OpenAPI servers[0].url within a user-defined action. Authenticated attackers possessing a project API key or console admin login...
EUVD-2026-98929
Podman: The podman run command can be instructed to disable almost all sandboxing by image annotation...
Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
Impact Podman v4.4.0 added a feature where container checkpoints from the podman container checkpoint command could be distributed via OCI registry, and pulled from that registry and run via the podman run command. This allowed easy transfer of checkpoints between systems. However, checkpoints...
GHSA-2CVF-WQM6-WR9G Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
Impact Podman v4.4.0 added a feature where container checkpoints from the podman container checkpoint command could be distributed via OCI registry, and pulled from that registry and run via the podman run command. This allowed easy transfer of checkpoints between systems. However, checkpoints...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ntfs3: Boundary checks for the buffer were added to rununpack. rununpack checks runbuf runlast at the beginning of the while loop. However, it then reads sizesize and offsetsize bytes via rununpacks64, without verifying that thes...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: dm thin: Fixed a UAF in runtimersoftirq When dmresume and dmdestroy are executed concurrently, it will lead to a UAF, as follows: Bug: KASAN: Use-after-free in runtimers+0x173/0x710 A 8-byte value is written to the address...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed a reference count leak in bpfprogtestrunxdp syzbot reports: unregisternetdevice: Waiting for sit0 to become available. Usage count = 2. A debug printk patch revealed that a reference count is obtained at...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: Fixed a bug where sleep was performed from an invalid context in btrfsqgroupinherit. Syzkaller reported the bug as follows: Bug: A sleep function is called from an invalid context at include/linux/sched/mm.h:274 Ca...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: bpf: Correctly track subprogram poke descriptors and fix use-after-free Subprograms call mappoketrack, but during program release, there is no hook to call mappokeuntrack. However, during program release, the auxiliary memory and...
CVE-2026-79836
A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...
CVE-2026-79836
The HPE NonStop SQL/MX Run-Time Statistics component is vulnerable to memory corruption and a null pointer dereference. This flaw may allow an attacker to cause a process crash , Denial of Service (DoS) , or information disclosure . Affected versions include SQL/MX Run-Time Statistics T1117 - T11...
CVE-2026-79836 HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability
A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...
EUVD-2026-102021
A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...
CVE-2026-79836: Improper Input Validation
A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...
CVE-2026-111321: Server-Side Request Forgery (SSRF)
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers0.url in a user-defined action. Attackers holding a project API key or console admin login c...
CVE-2026-110841
The n8n platform (versions before 2.41.4 and 2.42.0 ) is vulnerable to an authorization bypass in the agent chat resume endpoint. The root cause is the failure to verify that a suspended checkpoint belongs to the caller when a run identifier is accepted from the request body. Authenticated projec...