15859 matches found
CVE-2026-23985 Apache Superset: Regular Expression Denial of Service (ReDoS) in SQL Parser
A Regular Expression Denial of Service ReDoS vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sqlparse.py component, specifically within the SQLREGEX used for parsing SQL statements in the sqlparse library integration. The affected regular...
CVE-2026-23985 Apache Superset: Regular Expression Denial of Service (ReDoS) in SQL Parser
A Regular Expression Denial of Service ReDoS vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sqlparse.py component, specifically within the SQLREGEX used for parsing SQL statements in the sqlparse library integration. The affected regular...
ctf-toolkit
CTF Cheatsheets Collection !CTFhttps://img.shields.io/badg...
MCP Server Security: The Blind Spot in Your AI Stack
Short version: an MCP server is the tooling layer that lets an AI agent act on external systems. Hosted remotely, it is an API endpoint like any other — and it needs bot and WAF controls in front of it, API security on its own endpoints, and AI guardrails that inspect what the tools send back, no...
CVE-2026-18362
The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...
CVE-2026-16970
The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...
CVE-2026-16971
The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...
CVE-2026-18360
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the custom attributes function...
CVE-2026-18361
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the datastore upload function...
CVE-2026-16969
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the assets function...
CVE-2026-16970 DFIR-IRIS Insufficient Logout Implementation
The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...
CVE-2026-16970
The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...
EUVD-2026-51074
The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...
CVE-2026-16970
The CVE-2026-16970 entry concerns the IRIS web application (notably version 2.4.26, and possibly others) with a logout functionality that is ineffective. This can allow stolen session cookies to be misused for an extended period. According to the provided documents, the vulnerability affects the ...
CVE-2026-18362 DFIR-IRIS Missing Brute Force Protection in User Authentication
The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...
CVE-2026-18362
CVE-2026-18362 concerns the IRIS web application (noted in version 2.4.26 and possibly other revisions) that does not protect user authentication against brute-force attacks. The connected sources confirm the affected software and the underlying issue but do not provide details on exploit vectors...
EUVD-2026-51073
The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...
EUVD-2026-51072
The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...
CVE-2026-16971
The CVE-2026-16971 entry concerns the IRIS web application (noted around version 2.4.26) where MFA validation is not protected against brute-force attempts. The connected CVE records consistently describe insufficient brute-force protection for OTP validation, indicating that an attacker could re...