Security Operations
Threat Intelligence
❓
CRITICAL
CVE-2026-107034 - Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read ano
NEAR-REAL-TIME
CVE-2026-107034 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
INFORMATIONAL
CVE-2026-107033 - Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorize
NEAR-REAL-TIME
CVE-2026-107033 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
CRITICAL
CVE-2026-107032 - Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an e
NEAR-REAL-TIME
CVE-2026-107032 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
INFORMATIONAL
CVE-2026-107030 - Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger
NEAR-REAL-TIME
CVE-2026-107030 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
INFORMATIONAL
CVE-2026-107029 - Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to
NEAR-REAL-TIME
CVE-2026-107029 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
CRITICAL
CVE-2026-107028 - Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an export
NEAR-REAL-TIME
CVE-2026-107028 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
INFORMATIONAL
CVE-2026-107027 - Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported
NEAR-REAL-TIME
CVE-2026-107027 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
HIGH
CVE-2026-107026 - Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwri
NEAR-REAL-TIME
CVE-2026-107026 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
INFORMATIONAL
CVE-2026-107025 - Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export t
NEAR-REAL-TIME
CVE-2026-107025 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
INFORMATIONAL
CVE-2026-106036 - Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS c
NEAR-REAL-TIME
CVE-2026-106036 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
CRITICAL
CVE-2026-104339 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutraliza
NEAR-REAL-TIME
CVE-2026-104339 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104331 - IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat
NEAR-REAL-TIME
CVE-2026-104331 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
HIGH
CVE-2026-104328 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to impro
NEAR-REAL-TIME
CVE-2026-104328 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
HIGH
CVE-2026-104324 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deser
NEAR-REAL-TIME
CVE-2026-104324 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
HIGH
CVE-2026-104317 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitr
NEAR-REAL-TIME
CVE-2026-104317 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104316 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background wo
NEAR-REAL-TIME
CVE-2026-104316 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104315 - IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat
NEAR-REAL-TIME
CVE-2026-104315 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104314 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow
NEAR-REAL-TIME
CVE-2026-104314 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
LOW
CVE-2026-104312 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive co
NEAR-REAL-TIME
CVE-2026-104312 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104310 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to
NEAR-REAL-TIME
CVE-2026-104310 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗