vulnerabilityvia Exploit-DB (latest)
[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution
Langflow 1.8.4 - Path Traversal to Remote Code Execution
Aug 31, 2026 UTC
Security news
Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.
vulnerabilityvia CSO Online
Attackers built a ‘Skynet’ AI agent that hijacks exposed models to run cyberattacks
Skynet is no longer a fictional adversary. Attackers have built an offensive agent that exploits unprotected AI models on the web with a ‘Skynet’ directive that allows them to run...
Oct 28, 2026 UTC
vulnerabilityvia CSO Online
Node2Shell puts Microsoft and Node.js on Brotli patch duty
A vulnerability in Google’s Brotli compression library could allow attackers to execute arbitrary code in applications that use an affected Brotli decoder to process compressed dat...
Oct 27, 2026 UTC
vulnerabilityvia CSO Online
PHP2Shell exposes the weakness in coordinated vulnerability disclosure
Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the ramifications will take some time to truly understand. But o...
Oct 23, 2026 UTC
cloudvia SecurityWeek
HPE Patches Dozens of Critical Flaws in Networking Products
Eight max-severity security defects could lead to remote code execution and authentication bypass. The post HPE Patches Dozens of Critical Flaws in Networking Products appeared fi...
Oct 27, 2026 UTC
vulnerabilityvia Cisco Talos Intelligence
Two critical RCEs in PHP core
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and de...
Oct 21, 2026 UTC
vulnerabilityvia Google Online Security Blog
Bringing Rust to the Pixel Baseband
Posted by Jiacheng Lu, Software Engineer, Google Pixel Team Google is continuously advancing the security of Pixel devices. We have been focusing on hardening the cellular baseban...
Apr 10, 2026 UTC
vulnerabilityvia The Hacker News
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploit...
Oct 27, 2026 UTC
advisoryvia CISA Cybersecurity Advisories
Siemens Industrial Edge App Publisher
View CSAF Summary The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend resp...
Oct 22, 2026 UTC
advisoryvia CISA Cybersecurity Advisories
Critical Vulnerabilities in PHP Require Immediate Patching
Update October 26, 2026: CISA has updated this Alert to reflect the addition of CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities (KEV) Catalog on Oct. 2...
Oct 21, 2026 UTC
vulnerabilityvia The Hacker News
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with...
Oct 22, 2026 UTC
vulnerabilityvia The Hacker News
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression c...
Oct 22, 2026 UTC