Livewire: Authorization bypass in #[Authorize] via reordered parameter keys and #[Json] execution order

Impact Three issues allowed actions protected by the Authorize attribute to run against records the current user is not authorized for: 1. Out-of-order parameter keys on actions. Authorize resolved a model parameter by its array key, while the action itself received parameters positionally. A...

miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

CVE-2026-111440

在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger 类名调用 Class.forName 加载类后，直接反射调用以 String 为参数的构造函数，再转换为 Log。缺少 asSubclassLog.class 校验，非 Log 实现类也会在类型检查前被实例化。因此，当攻击者可控制 JDBC URL 或连接属性中的 logger 类名，且客户端 classpath...

EUVD-2026-104058

在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger 类名调用 Class.forName 加载类后，直接反射调用以 String 为参数的构造函数，再转换为 Log。缺少 asSubclassLog.class 校验，非 Log 实现类也会在类型检查前被实例化。因此，当攻击者可控制 JDBC URL 或连接属性中的 logger 类名，且客户端 classpath...

CVE-2014-0472

CVE-2014-0472 Use docker-compose up -d Access localhost:8083 Reference: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. One or more views are present which construct a URL based on user input commonly, a "next" parameter in a querystring indicating where to redirect upon successful...

datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory

Summary When processing an attacker-controlled Protobuf schema, vulnerable versions of datamodel-code-generator could write a generated weak-import stub outside the intended weakimports temporary directory. Absolute import paths and relative paths containing .. could escape this directory. An...

CVE-2026-107292 Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 2.30.0, the Agent.toweb and clai web development chat server does not validate the Host header, allowing a website visited by a developer to use DNS rebinding to reach a...

PT-2026-108047

Name of the Vulnerable Software and Affected Versions Pydantic AI versions 1.34.0 through 1.107.4 Pydantic AI versions 2.0.0 through 2.29.9 Description The Agent.to web and clai web development chat server fails to validate the Host header of incoming requests. This allows a malicious website...

EUVD-2026-92790

Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/flowid/vertices endpoints...

CVE-2026-105698

Langflow (versions 1.0.0 through 1.10.0) is vulnerable to cross-user flow access and unauthorized vertex execution due to a missing ownership check in deprecated handlers. Specifically, the POST /api/v1/build/{flow_id}/vertices and POST /api/v1/build/{flow_id}/vertices/{vertex_id} endpoints faile...

CVE-2026-105698 Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/flowid/vertices and POST /api/v1/build/flowid/vertices/vertexid handlers. Through version 1.7.1, an unauthenticated...

CVE-2026-105698 Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/flowid/vertices and POST /api/v1/build/flowid/vertices/vertexid handlers. Through version 1.7.1, an unauthenticated...

CVE-2026-105698 Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/flowid/vertices and POST /api/v1/build/flowid/vertices/vertexid handlers. Through version 1.7.1, an unauthenticated...

PT-2026-106233

Name of the Vulnerable Software and Affected Versions Langflow versions 1.0.0 through 1.10.0 Description Langflow fails to verify flow ownership in the deprecated 'POST /api/v1/build/flow id/vertices' and 'POST /api/v1/build/flow id/vertices/vertex id' endpoints. In versions prior to 1.7.2, these...

PT-2026-98197

Name of the Vulnerable Software and Affected Versions DBHub versions prior to 0.22.6 Description Setting readonly = true on the execute sql tool fails to enforce a read-only connection. The database-level read-only controls are not activated because the required configuration value is never...

CVE-2026-57137

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generateText before invoking the onToolCall approval callback. Because the wrapped AI SDK executes tool handlers during generation, a callback that...

EUVD-2026-78422

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generateText before invoking the onToolCall approval callback. Because the wrapped AI SDK executes tool handlers during generation, a callback that...

CVE-2026-57137 PraisonAI AgentLoop onToolCall approval runs after tool execution

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generateText before invoking the onToolCall approval callback. Because the wrapped AI SDK executes tool handlers during generation, a callback that...

CVE-2026-57137

PraisonAI (npm:praisonai) is a TypeScript AI agent framework. In versions 1.4.0 through 1.7.1 , the createAgentLoop() function passes executable tool handlers to the AI SDK's generateText() before invoking the onToolCall approval callback. Because the AI SDK executes tools during generation, a ca...

CVE-2026-57137 PraisonAI AgentLoop onToolCall approval runs after tool execution

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generateText before invoking the onToolCall approval callback. Because the wrapped AI SDK executes tool handlers during generation, a callback that...