Lucene search
+L

1960 matches found

NVD
NVD
added 2026/09/10 10:16 p.m.9 views

CVE-2026-78569

IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner...

8.8CVSS0.00457EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/10 10:16 p.m.8 views

CVE-2026-76059

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the...

8.8CVSS0.00473EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 9:43 p.m.41 views

CVE-2026-78569 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner...

8.8CVSS0.00457EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 9:43 p.m.40 views

CVE-2026-78569

IBM Langflow OSS (versions 1.0.0 through 1.11.5) is vulnerable to arbitrary code execution by an authenticated attacker due to an incomplete denylist in its agentic assistant code security scanner. The scanner omits process-spawning primitives and contains a logic error where annotated class-body...

8.8CVSS6.5AI score0.00457EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/10 9:09 p.m.10 views

ConMachi

Conmachi Container Scanner Is It Wrong To Pick Up Capabilities In A Container? Conmachi is a tool written in Golang intended to be used to collect information about a container environment and list potential security issues. It can be statically compiled so that it can be dropped into a container...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:46 p.m.10 views

sparty

Sparty - Herramienta de Auditoría de Sharepoint/Frontpage ! Escrito por: Aditya K Sood |[email protected] | 2013 Twitter: @AdityaKSood Desarrollado por: SecNiche Security Labs ! Sparty es una herramienta de código abierto escrita en Python para auditar aplicaciones web que utilizan la...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:11 p.m.12 views

aws-perimeter

aws-perimeter Un Escáner de seguridad de AWS basado en terminal con más de 100 verificaciones de seguridad en VPC, IAM, S3, CloudTrail, contenedores ECS/EKS y detección de ataques de IA. Detecta permisos peligrosos de IAM, secretos expuestos, buckets S3 mal configurados, vulnerabilidades de...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 7:04 a.m.6 views

CVE-2025-34291_cors_security_scanner

CVE-2025-34291corssecurityscanner A lightweight Python-based security assessment tool for detecting dangerous Cross-Origin Resource Sharing CORS misconfigurations - CVE-2025-34291. root@kitploit: CORS Security Scanner A lightweight Python-based security assessment tool for detecting dangerous...

9.4CVSS8.7AI score0.83629EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/10 1:43 a.m.6 views

cPanel-WHM-CVE-2026-41940-AuthBypass

CVE-2026-41940 cPanel & WHM Authentication Bypass Scanner ⚠️ Legal Disclaimer This tool is intended for authorized security testing and educational purposes only. Users must comply with local laws and regulations; scanning unauthorized systems is strictly prohibited. The author is not responsible...

9.8CVSS8.4AI score0.98527EPSS
SaveExploits76
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.10 views

PT-2026-89611

🚨 CVE-2026-78569 IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner. 🎖@cveNotify...

8.8CVSS6.5AI score0.00457EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/03 6:06 a.m.12 views

agent-scan v0.6.1

Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: CLI output is experimental and subject to change Agent Scan v0.5.x planned for deprecation The raw output of this CLI — including issue codes,...

6AI score
SaveExploits0References34
NVD
NVD
added 2026/09/02 5:18 p.m.13 views

CVE-2026-84811

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

7.1CVSS0.00287EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/31 4:59 a.m.9 views

ship-safe v9.7.5

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

6AI score
SaveExploits0References25
Wolfi
Wolfi
added 2026/08/20 8:51 p.m.29 views

GHSA-72X6-4J93-7W86 vulnerabilities

Vulnerabilities for packages: scorecard, trivy, skaffold, zot, podman, guac, conftest, kaniko, kubescape...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/20 9:51 a.m.10 views

SecureAI-Scan v0.10.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

9.6CVSS9.6AI score0.77866EPSS
SaveExploits1References36
OSV
OSV
added 2026/08/18 3:14 p.m.9 views

CVE-2026-63328 Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write

Trivy is a security scanner. Prior to 0.72.0, plugin manifest metadata is used by pkg/plugin/manager.go to construct paths under /.trivy/plugins without confining plugin names to that root, allowing an attacker who persuades a user to install or run a malicious plugin to write the manifest and...

6.8CVSS5.7AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-68466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: rawnand: lpc32xxslc: fail DMA transfer on completion timeout lpc32xxxmitdma waits for the DMA completion callback but ignores waitforcompletiontimeout. A...

8.8CVSS6AI score0.00129EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/14 10:43 p.m.38 views

CVE-2026-74243

In Red Hat Quay, when SECURITY_SCANNER_V4_PSK is not configured, unauthenticated attackers can flood the notification queue and inject path traversal characters into Clair API URLs, causing worker resource exhaustion and blind path manipulation on the Clair host. Mitigation: set the pre-shared ke...

8.2CVSS5.5AI score0.00265EPSS
SaveExploits0References2Affected Software2
Chainguard
Chainguard
added 2026/08/14 8:25 a.m.32 views

GO-2026-4509 vulnerabilities

Vulnerabilities for packages: nuclei...

5.3AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:25 a.m.28 views

GO-2026-4512 vulnerabilities

Vulnerabilities for packages: nuclei, commercial-expanso-edge...

5.7AI score
SaveExploits0
Rows per page
Query Builder