People
CVE-2025-3248 – Unauthenticated Remote Code Execution in Langflow via Insecure Python exec Usage
CVE-2025-3248 is a critical RCE vulnerability in Langflow that allows unauthenticated attackers to execute arbitrary Python code via unsanitized input to exec(). Learn how it works and how to protect your system.
PeopleCVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Executionoffsec.com
PeopleCVE-2025-0655 – Remote Code Execution in D-Tale via Unprotected Custom Filtersoffsec.com
PeopleCVE-2025-24893 – Unauthenticated Remote Code Execution in XWiki via SolrSearch Macrooffsec.com
PeopleCVE-2025-29306 – Unauthenticated Remote Code Execution in FoxCMS v1.2.5 via Unserialize Injectionoffsec.com
PeopleCVE-2025-27636 – Remote Code Execution in Apache Camel via Case-Sensitive Header Filtering Bypassoffsec.com
PeopleCVE-2024-13059: Exploiting Path Traversal in AnythingLLM for Remote Code Executionoffsec.com
Products & ServicesCisco Cyber VisionCisco
Products & ServicesAgenticOps for Enterprise NetworkingCisco
BlogsI'm Doing a Little Consulting — overreactedoverreacted.io
ResourcesLance Extensionduckdb.org
ResourcesLance Extensionduckdb.org
ResourcesLibreDB Studio SQL Editorduckdb.org
ResourcesLambda Functionsduckdb.org
ResourcesLambda Functionsduckdb.org
ResourcesKnown Python Issuesduckdb.org
ResourcesTroubleshootingduckdb.org
ResourcesTroubleshootingduckdb.org
ResourcesKnown Python Issuesduckdb.org
ResourcesTroubleshootingduckdb.org
ResourcesJupyter Notebooksduckdb.org