1961 matches found
EUVD-2026-75801
IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the...
arachni-ui-web
通知 Arachni 正逐步走向淘汰，试试其下一代继任者 Ecsypno SCNR 吧！ Arachni - Web 用户界面 版本| 0.6.1.1 ---|--- 主页| http://arachni-scanner.com 博客| http://arachni-scanner.com/blog Github| http://github.com/Arachni/arachni-ui-web 文档| https://github.com/Arachni/arachni-ui-web/wiki 支持| http://support.arachni-scanner.com 作者| Tas...
CVE-2026-76059
IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the...
CVE-2026-78569
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner...
CVE-2026-78569
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner...
CVE-2026-78569 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner...
CVE-2026-78569
IBM Langflow OSS (versions 1.0.0 through 1.11.5) is vulnerable to arbitrary code execution by an authenticated attacker due to an incomplete denylist in its agentic assistant code security scanner. The scanner omits process-spawning primitives and contains a logic error where annotated class-body...
ConMachi
Conmachi 容器扫描器 在容器中拾取 Capabilities 有错吗？ Conmachi 是一款用 Golang 编写的工具，旨在收集容器环境的相关信息并列出潜在的安全问题。它可以被静态编译，以便放入容器环境中，无需任何依赖即可运行。 构建 依赖项： root@kitploit: sudo apt-get install libpcap-dev Conmachi 旨在任何 LTS 版本的 Ubuntu 上构建。在开发过程中，它使用 Go 1.9 及以上版本构建，但应该也可以在大多数版本下编译。 你可以使用以下命令静态构建该工具： root@kitploit: go get...
sparty
Sparty - Sharepoint/Frontpage 审计工具 ! 作者: Aditya K Sood |[email protected] | 2013 Twitter: @AdityaKSood 提供支持: SecNiche Security Labs ! Sparty 是一个用 python 编写的开源工具，用于审计基于 sharepoint 和 frontpage 架构的 Web 应用程序。开发该工具的动机是提供一种简单而稳健的方式来审查基于 sharepoint 和 frontpage 的 Web 应用程序的安全配置。由于这些 Web...
aws-perimeter
aws-perimeter A terminal-based AWS Security Scanner with 100+ security checks across VPC, IAM, S3, CloudTrail, containers ECS/EKS, and AI attack detection. Detects dangerous IAM permissions, exposed secrets, misconfigured S3 buckets, container vulnerabilities, and emerging LLMjacking threats...
PT-2026-89611
🚨 CVE-2026-78569 IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner. 🎖@cveNotify...
agent-scan v0.6.1
Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: CLI output is experimental and subject to change Agent Scan v0.5.x planned for deprecation The raw output of this CLI — including issue codes,...
CVE-2026-84811
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...
ship-safe v9.7.5
The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...
GHSA-72X6-4J93-7W86 vulnerabilities
Vulnerabilities for packages: kaniko, guac, skaffold, kubescape, conftest, podman, zot, trivy, scorecard...
SecureAI-Scan v0.10.0
SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...
CVE-2026-63328 Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write
Trivy is a security scanner. Prior to 0.72.0, plugin manifest metadata is used by pkg/plugin/manager.go to construct paths under /.trivy/plugins without confining plugin names to that root, allowing an attacker who persuades a user to install or run a malicious plugin to write the manifest and...
Linux Distros Unpatched Vulnerability : CVE-2026-68466
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: rawnand: lpc32xxslc: fail DMA transfer on completion timeout lpc32xxxmitdma waits for the DMA completion callback but ignores waitforcompletiontimeout. A...
CVE-2026-74243
In Red Hat Quay, when SECURITY_SCANNER_V4_PSK is not configured, unauthenticated attackers can flood the notification queue and inject path traversal characters into Clair API URLs, causing worker resource exhaustion and blind path manipulation on the Clair host. Mitigation: set the pre-shared ke...
