Lucene search
+L

3302 matches found

Kitploit
Kitploit
•added 2026/10/03 1:31 a.m.•17 views

send

@fastify/send Send es una librería para transmitir archivos del sistema de archivos como respuesta HTTP, con soporte para respuestas parciales Ranges, negociación condicional GET If-Match, If-Unmodified-Since, If-None-Match, If-Modified-Since, alta cobertura de pruebas y eventos granulares que...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/02 10:30 a.m.•12 views

send

Enviar Un fork de Firefox Send de Mozilla. Mozilla descontinuó Send, este fork es un esfuerzo comunitario para mantener el proyecto actualizado y vivo. Bifurcado en la última versión alojada públicamente de Mozilla La marca Mozilla y Firefox se ha eliminado para que puedas auto-alojarlo legalment...

6.3AI score
SaveExploits0References25
NVD
NVD
•added 2026/10/01 11:17 a.m.•9 views

CVE-2026-103260

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or approval permissions, allowing unauthenticated users to advan...

6.3CVSS0.00281EPSS
SaveExploits0References2
OSV
OSV
•added 2026/10/01 10:42 a.m.•2 views

CVE-2026-103260 n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or approval permissions, allowing unauthenticated users to advan...

6.3CVSS5.8AI score
SaveExploits0References4
CVE
CVE
•added 2026/10/01 10:42 a.m.•18 views

CVE-2026-103260

The n8n workflow automation tool (versions before 2.39.6 and 2.40.x before 2.40.1 ) is vulnerable to an approval bypass in the Send and Wait node's Approve Within Chat mode. The root cause is a lack of verification regarding the identity or approval permissions of the requester. Consequently, una...

6.3CVSS5.8AI score0.00281EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/01 10:42 a.m.•2 views

EUVD-2026-90654

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or approval permissions, allowing unauthenticated users to advan...

6.3CVSS5.8AI score0.00281EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/01 10:42 a.m.•7 views

CVE-2026-103260 n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or approval permissions, allowing unauthenticated users to advan...

6.3CVSS5.8AI score0.00281EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/01 10:42 a.m.•35 views

CVE-2026-103260 n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or approval permissions, allowing unauthenticated users to advan...

6.3CVSS0.00281EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/01 10:41 a.m.•4 views

EUVD-2026-90648

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in signed resume URL generation for Send-and-Wait approvals. Attackers with workflow creation permissions can mint valid approval URLs for gates in projects they cannot...

7CVSS5.8AI score0.0028EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/01 10:41 a.m.•12 views

CVE-2026-103254

The software n8n is vulnerable to a path traversal vulnerability in its signed resume URL generation for Send-and-Wait approvals . Affected versions include those before 1.123.80 , 2.0.0 before 2.39.6 , and 2.40.0 before 2.40.1 . An attacker with workflow creation permissions can exploit unresolv...

7CVSS5.8AI score0.0028EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/01 10:41 a.m.•31 views

CVE-2026-103254 n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in signed resume URL generation for Send-and-Wait approvals. Attackers with workflow creation permissions can mint valid approval URLs for gates in projects they cannot...

7CVSS0.0028EPSS
SaveExploits0References2
OSV
OSV
•added 2026/10/01 10:41 a.m.•1 views

CVE-2026-103254 n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in signed resume URL generation for Send-and-Wait approvals. Attackers with workflow creation permissions can mint valid approval URLs for gates in projects they cannot...

7CVSS5.8AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•1 views

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1777614769)

"The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1777614769 advisory. - In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asixmdioread asixreadcmd may rea...

9.8CVSS7AI score0.03437EPSS
SaveExploits244References18
NVD
NVD
•added 2026/09/29 1:17 p.m.•12 views

CVE-2026-82804

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

8.8CVSS0.005EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 1:01 p.m.•8 views

EUVD-2026-88812

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

8.8CVSS6.2AI score0.005EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/26 3:22 p.m.•18 views

-CVE-2021-41962

-CVE-2021-41962 Descripción Existe una vulnerabilidad de Cross Site Scripting XSS en Sourcecodester Vehicle Service Management System 1.0 a través del parámetro Owner fullname en un Send Service Request en vehicleservice. Información adicional N/A Tipo de vulnerabilidad Cross Site Scripting XSS...

4.8CVSS5.9AI score0.006EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2026/09/26 1:23 p.m.•6 views

CVE-2026-100634 SiYuan before v3.8.4 Missing Authorization via siyuan-send-windows

SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows' IPC handler of the Electron main process app/electron/main.js. The handler ignores event.sender and forwards any received payload to every BrowserWindow returned by BrowserWindow.getAllWindows,...

5.3CVSS6AI score0.0047EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/26 1:23 p.m.•16 views

CVE-2026-100634

SiYuan versions before v3.8.4 are vulnerable to a flaw in the 'siyuan-send-windows' IPC handler within the Electron main process (app/electron/main.js). The handler fails to validate the sender or restrict recipients, forwarding payloads to every BrowserWindow via BrowserWindow.getAllWindows(), i...

5.3CVSS6AI score0.0047EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/26 1:23 p.m.•8 views

CVE-2026-100634 SiYuan before v3.8.4 Missing Authorization via siyuan-send-windows

SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows' IPC handler of the Electron main process app/electron/main.js. The handler ignores event.sender and forwards any received payload to every BrowserWindow returned by BrowserWindow.getAllWindows,...

5.3CVSS6AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/26 1:23 p.m.•35 views

CVE-2026-100634 SiYuan before v3.8.4 Missing Authorization via siyuan-send-windows

SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows' IPC handler of the Electron main process app/electron/main.js. The handler ignores event.sender and forwards any received payload to every BrowserWindow returned by BrowserWindow.getAllWindows,...

5.3CVSS0.0047EPSS
SaveExploits0References3
Rows per page
Query Builder