358 matches found
CVE-2026-0770
Langflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific...
CVE-2026-23645 SiYuan Vulnerable to Stored Cross-Site Scripting (XSS) via Unrestricted SVG File Upload
SiYuan is self-hosted, open source personal knowledge management software. Prior to 3.5.4-dev2, a Stored Cross-Site Scripting XSS vulnerability exists in SiYuan Note. The application does not sanitize uploaded SVG files. If a user uploads and views a malicious SVG file e.g., imported from an...
PT-2026-3304
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.5.4-dev2 Description SiYuan Note does not properly sanitize uploaded SVG files. This allows a user to upload a malicious SVG file, such as one obtained from an untrusted source, which can then execute arbitrary...
PT-2026-26327
Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap-based buffer overflow could occur when improperly storing the CRL number as a hexadecimal string, and a stack-based overflow for sufficiently sized CRL numbers. With appropriately crafted CRLs,...
Inclusion of Web Functionality from an Untrusted Source
Overview github.com/mindersec/minder/internal/datasources/rest is an implementation of a REST data source Affected versions of this package are vulnerable to Inclusion of Web Functionality from an Untrusted Source via the http.send function in Rego programs. A user can access internal network...
Siemens SIMATIC S7-1500 Excessive Iteration (CVE-2023-3817)
Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckex or EVPPKEYparamcheck to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been...
Inclusion of Web Functionality from an Untrusted Source
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Inclusion of Web Functionality from an Untrusted Source via the execute event handler used by the Direct Connections feature. An attacker can gain access to authentication tokens, take over user accounts, and...
EUVD-2019-1169
Malware in sbrugna...
EUVD-2017-17794
Malware in sbrugna...
EUVD-2017-2730
Malware in sbrugna...
EUVD-2021-0034
Malware in sbrugna...
EUVD-2020-19515
Malware in sbrugna...
EUVD-2020-27352
Malware in sbrugna...
EUVD-2023-29591
Malicious code in bioql PyPI...
EUVD-2023-1445
Malicious code in bioql PyPI...
EUVD-2022-24950
Malicious code in bioql PyPI...
EUVD-2025-25128
Malicious code in bioql PyPI...
EUVD-2024-2364
Malicious code in bioql PyPI...