1215 matches found
CVE-2026-106462
Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integration credentials and perform operation...
Langflow < 1.9.0 - Remote Code Execution
Langflow versions prior to 1.9.0 are vulnerable to unauthenticated remote code execution RCE via the buildpublictmp endpoint. Attackers can submit a manipulated flow JSON containing Python code that is executed during the build process without proper sandboxing. id: CVE-2026-33017 info: name:...
xmlrpc-bruteforcer
An XMLRPC BruteForcer for Wordpress - Inpired by 1N3@CrowdShield Note - This project is discontinued Usage python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username python3 xmlrpcbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt userlist.txt in progess Target is...
CVE-2026-94243
The Apache Sling Security Bundle is vulnerable to a security flaw where the ReferrerFilter accepts weaker-than-origin evidence. This issue affects all versions before 1.3.2 . To remediate this vulnerability, users are recommended to upgrade to version 1.3.2 . No specific exploit details or in-the...
EUVD-2026-85182
A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...
CVE-2026-94243 Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence
A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...
CVE-2026-84304 affecting package containerized-data-importer for versions less than 1.62.0-8
CVE-2026-84304 affecting package containerized-data-importer for versions less than 1.62.0-8. A patched version of the package is available...
CVE-2026-84445 affecting package azcopy for versions less than 10.25.1-9
CVE-2026-84445 affecting package azcopy for versions less than 10.25.1-9. An upgraded version of the package is available that resolves this issue...
CVE-2026-84304 affecting package skopeo for versions less than 1.14.4-13
CVE-2026-84304 affecting package skopeo for versions less than 1.14.4-13. A patched version of the package is available...
CVE-2026-84445 affecting package telegraf for versions less than 1.31.0-33
CVE-2026-84445 affecting package telegraf for versions less than 1.31.0-33. An upgraded version of the package is available that resolves this issue...
CVE-2026-37236 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9
CVE-2026-37236 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9. A patched version of the package is available...
CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10
CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. An upgraded version of the package is available that resolves this issue...
CVE-2026-72924 affecting package gh for versions less than 2.101.0-1
CVE-2026-72924 affecting package gh for versions less than 2.101.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-7598 affecting package rust for versions less than 1.96.1-2
CVE-2026-7598 affecting package rust for versions less than 1.96.1-2. A patched version of the package is available...
Astra Linux – Vulnerability in Thunderbird, Firefox
Memory safety bugs exist in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has be...
Astra Linux – Vulnerability in Firefox and Thunderbird
Push notifications stored on disk in private browsing mode were not encrypted, potentially allowing the leakage of sensitive information. This vulnerability affects Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2...
Astra Linux – Vulnerability in Firefox and Thunderbird
When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...
CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
SWC HTML minifier may allow script element breakout when minifying embedded JSON
Impact @swc/html minifies JSON contained in script elements such as application/json and application/ld+json by parsing and serializing the JSON value. Before the patched versions, JSON serialization could convert escaped less-than signs such as \u003C into literal sequence, the generated HTML...