112029 matches found
CVE-2026-10530
creationtimestamp| type| source ---|---|--- 2026-06-22 07:59:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moug4p7kfu2r...
CVE-2026-12804
A flaw was found in lemonldap-ng. A remote attacker could exploit this vulnerability by manipulating the 'url' argument within the SAML Common Domain Cookie Endpoint. This manipulation results in an open redirect, potentially leading to users being redirected to arbitrary malicious websites...
GHSA-V3F4-W7R7-V3HM
creationtimestamp| type| source ---|---|--- 2026-06-22 05:11:16+00:00| seen| https://gist.github.com/alon710/c55617deed0f6aa3ac7d480b01fa4253...
CVE-2026-35222
creationtimestamp| type| source ---|---|--- 2026-06-22 05:01:52+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou477ypkc2z...
CVE-2026-9458
creationtimestamp| type| source ---|---|--- 2026-06-22 04:17:05+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motzp5h7px2b...
CVE-2026-9457
creationtimestamp| type| source ---|---|--- 2026-06-22 04:16:43+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motzoies3n2r...
CVE-2026-9387
creationtimestamp| type| source ---|---|--- 2026-06-22 02:47:03+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motuo2fcjb2n...
Arbitrary Code Injection
Overview langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Arbitrary Code Injection in the Bundle URL Loader process. An attacker can execute arbitrary code by supplying crafted input to this component. Remediation Upgrade langflow...
EUVD-2026-38199
A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the library packages/server/engine/src/lib/variables/processors/file.ts of the component File URL Handler. The manipulation results in server-side request forgery. The attack can be...
EUVD-2026-38197
A weakness has been identified in kortix-ai suna up to 0.8.38. Affected by this issue is the function router.replace/router.push of the file apps/frontend/src/app/auth/page.tsx of the component Auth Endpoint. Executing a manipulation of the argument returnURL can lead to cross site scripting. The...
CVE-2026-7876
creationtimestamp| type| source ---|---|--- 2026-06-22 00:26:03+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmrhl6fn2f...
Linux Distros Unpatched Vulnerability : CVE-2026-54282
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because...
Linux Distros Unpatched Vulnerability : CVE-2026-12804
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of...
CVE-2026-12822 langflow-ai langflow Bundle URL Loader code injection
A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function of the component Bundle URL Loader. The manipulation leads to code injection. The attack needs to be performed locally. The vendor was contacted early about this disclosure but did not respond in...
CVE-2026-12822
A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function of the component Bundle URL Loader. The manipulation leads to code injection. The attack needs to be performed locally. The vendor was contacted early about this disclosure but did not respond in...
CVE-2026-12822
Langflow AI langflow
CVE-2026-12813
A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the library packages/server/engine/src/lib/variables/processors/file.ts of the component File URL Handler. The manipulation results in server-side request forgery. The attack can be...
CVE-2026-12813 activepieces File URL file.ts handleUrlFile server-side request forgery
A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the library packages/server/engine/src/lib/variables/processors/file.ts of the component File URL Handler. The manipulation results in server-side request forgery. The attack can be...
CVE-2026-12813
A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the library packages/server/engine/src/lib/variables/processors/file.ts of the component File URL Handler. The manipulation results in server-side request forgery. The attack can be...