Lucene search
+L

1134 matches found

Github Security Blog
Github Security Blog
added 2025/10/30 5:4 p.m.14 views

n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook

Impact A remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use of the Commit operation in the Git Node can inadvertently trigg...

8.8CVSS8.4AI score0.0076EPSS
SaveExploits3References5Affected Software1
Cvelist
Cvelist
added 2025/10/30 4:24 p.m.14 views

CVE-2025-62726 n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook

n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use ...

8.8CVSS0.0076EPSS
SaveExploits3References3
NVD
NVD
added 2025/10/21 8:15 a.m.8 views

CVE-2025-26392

SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account...

5.4CVSS0.00212EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/21 7:46 a.m.6 views

EUVD-2025-35157

SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account...

5.4CVSS7.5AI score0.00212EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/21 7:46 a.m.27 views

CVE-2025-26392

SolarWinds Observability Self-Hosted is affected by CVE-2025-26392: an SQL injection vulnerability that can disclose sensitive data when authenticated from a low-privilege account. The issue affects the product as described in multiple sources (NVD, Red Hat/CIRCL/CVE lists and related advisories)...

5.4CVSS7.7AI score0.00212EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/21 7:46 a.m.4 views

CVE-2025-26392 SolarWinds Observability Self-Hosted SQL Injection Vulnerability

SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account...

5.4CVSS7.7AI score0.00212EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/21 12:0 a.m.9 views

SolarWinds Observability Self-Hosted SQL注入漏洞

SolarWinds Observability Self-Hosted is an observation platform from SolarWinds USA. SolarWinds Observability Self-Hosted suffers from a SQL injection vulnerability that stems from susceptibility to SQL injection attacks, which could lead to sensitive data disclosure...

5.4CVSS7.8AI score0.00212EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/20 6:15 p.m.10 views

CVE-2025-62509

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to version 1.4.0, a business logic flaw in FileRise’s file/folder handling allows low-privilege users to perform unauthorized operations view/delete/modify on files created by other users...

8.1CVSS0.00285EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/10/11 1:23 a.m.8 views

CVE-2025-11450

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being executed within the browsers of ServiceNow users who click on a specially crafted link. ServiceNow has addressed this...

5.3CVSS6.7AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/11 1:23 a.m.10 views

CVE-2025-11449

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being executed within the browsers of ServiceNow users who click on a specially crafted link. ServiceNow has addressed this...

5.3CVSS6.7AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/10 1:9 a.m.21 views

CVE-2025-11450

CVE-2025-11450 describes a reflected cross-site scripting vulnerability in the ServiceNow AI Platform. The issue could allow arbitrary code execution in the browser of a ServiceNow user who clicks a crafted link. ServiceNow has deployed security updates to the majority of hosted instances and pro...

5.3CVSS6.4AI score0.00331EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.7 views

PT-2025-41499

Name of the Vulnerable Software and Affected Versions ServiceNow affected versions not specified Description A reflected cross-site scripting issue exists in the ServiceNow AI Platform. Successful exploitation could allow for the execution of arbitrary code within the browsers of ServiceNow users...

5.3CVSS6.4AI score0.00331EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-10004

Malware in sbrugna...

9.8CVSS9.2AI score0.01195EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-25597

Malware in sbrugna...

5.3CVSS5.4AI score0.00849EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.12 views

EUVD-2024-39402

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.00789EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2024-3383

Malicious code in bioql PyPI...

5.3CVSS6.4AI score0.00634EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2024-2337

Malicious code in bioql PyPI...

7.1CVSS6.4AI score0.00467EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-16931

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00159EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-16907

Malicious code in bioql PyPI...

7.5CVSS6.5AI score0.00395EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-0191

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01003EPSS
SaveExploits1References10
Rows per page
Query Builder