Skip to content
NewA calmer, faster ZeroHour
  • Mentions · 7d2 
  • Mentions · 30d18 
  • All mentions29 
  • First seenAug 11, 2026 
  • Last mentioned19h ago 

Timeline

29 articles · newest first

Related CVEs

by mentions
  • Langflow: Any authenticated Langflow user can achieve Remote Code Execution (RCE) on the server by adding an MCP server with the "Stdio"…
    published
  • Unauthenticated RCE Chain in IBM Langflow OSS 1.0.0-1.10.0
    published IBM Langflow OSSKEVPoC
  • Apple Web Content Bounds-Check Flaw Enables Code Execution Across iOS, macOS, Safari
    published Apple iPhone OS (iOS)KEV
  • IDOR Authorization Bypass in Langflow Lets Attackers Run Other Users' Flows
    published LangflowKEVPoC
  • Langflow: The MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and (before…
    published pip
  • Langflow code Code Injection Remote Code Execution Vulnerability
    published langflow langflow
  • The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4
    published WordPress
  • Authenticated Code Injection to Root RCE in Flowise CSVAgent before 3.1.3
    published flowiseai flowisePoC
  • Unauthenticated privilege escalation in miniOrange SAML SSO WordPress plugin
    published miniOrange SAML SP Single Sign On (WordPress plugin)

Appears with

Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.