1442787 matches found
CVE-2026-19286
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint...
EUVD-2026-42286
SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets...
CVE-2026-55678
creationtimestamp| type| source ---|---|--- 2026-08-28 21:31:53+00:00| seen| https://gist.github.com/alon710/f6616451da7f3f1b989952d24a3d867c 2026-08-28 22:35:03+00:00| published-proof-of-concept| https://github.com/Basekick-Labs/arc/security/advisories/GHSA-p378-jp5r-gpgw...
CVE-2026-55520
creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:15+00:00| published-proof-of-concept| https://github.com/scrapy/protego/security/advisories/GHSA-wjmf-p669-5m5p...
CVE-2026-55220
creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:07+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-w23p-wrp7-ch38 2026-08-28 22:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu6erfrsko2t 2026-08-29 14:10:05+00:00...
CVE-2026-55634
creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:05+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-9x44-4gxf-8c25 2026-08-28 22:08:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu6eta3ywc2b 2026-08-29 01:08:54+00:00...
PrivateBin has stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction
Summary Stored cross-site scripting XSS in PrivateBin's attachment download link. An anonymous attacker can create a paste with a text/html attachment that, with certain user interaction, bypasses protections similar to CVE-2022-24833. When a victim opens the "Download attachment" link in a new...
CVE-2026-70309
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
UBUNTU-CVE-2026-55520
Protego is a pure-Python robots.txt parser with support for modern conventions. Prior to 0.6.2, protego.urlpattern.URLPattern.preparepatternforregex translates every asterisk in an Allow or Disallow directive into a lazy regular-expression wildcard, so a directive containing many asterisks create...
CVE-2026-77037
creationtimestamp| type| source ---|---|--- 2026-08-28 19:48:29+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mu64x7sf222k 2026-08-29 06:02:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu77chep2i2r...
MINI-WHPR-9M6V-JQ5H
Bulletin has no description...
MINI-3P3V-PG5C-MGJG
Bulletin has no description...
MINI-4M6J-G62V-FHGX
Bulletin has no description...
MINI-3FC9-FP29-3G6P
Bulletin has no description...
MINI-5CFW-V2C5-479W
Bulletin has no description...
MINI-Q2R4-FJ57-FFJG
Bulletin has no description...
MINI-46RM-9J23-2R54
Bulletin has no description...
MINI-M737-8XWW-XHPX
Bulletin has no description...