https://appsecscoop.com/c/vulnerabilities/langalpha-vulnerability-allows-remote-shell/AppSec Scoopen2026-10-20T03:01:20ZLangAlpha vulnerability allows remote shell execution via prompt injectionhttps://appsecscoop.com/c/vulnerabilities/orgs-urged-to-patch-pillow-cve-2026-112393-to/AppSec Scoopen2026-10-20T02:32:15ZOrgs urged to patch Pillow CVE-2026-112393 to stop TIFF code executionhttps://appsecscoop.com/c/vulnerabilities/unauthenticated-rce-in-langchain-chatchat-exposes/AppSec Scoopen2026-10-20T01:34:06ZUnauthenticated RCE in Langchain-Chatchat exposes shell tool to remote attackershttps://appsecscoop.com/c/vulnerabilities/letta-0-16-8-critical-vulnerability-allows/AppSec Scoopen2026-10-20T01:28:48ZLetta 0.16.8 Critical Vulnerability Allows Unauthenticated Remote Code Executionhttps://appsecscoop.com/c/vulnerabilities/ibm-tririga-flaw-lets-authenticated-users-run/AppSec Scoopen2026-10-20T00:23:26ZIBM TRIRIGA flaw lets authenticated users run arbitrary codehttps://appsecscoop.com/c/vulnerabilities/patch-failures-surge-as-ai-tools-accelerate/AppSec Scoopen2026-10-20T00:05:01ZPatch failures surge as AI tools accelerate vulnerability discoveryhttps://appsecscoop.com/c/vulnerabilities/unpatched-pillow-flaws-leak-heap-memory-in-image/AppSec Scoopen2026-10-19T22:37:59ZUnpatched Pillow flaws leak heap memory in image processing applicationshttps://appsecscoop.com/c/vulnerabilities/pillow-pdf-flaw-causes-denial-of-service-in/AppSec Scoopen2026-10-19T22:14:00ZPillow PDF flaw causes denial of service in Python applicationshttps://appsecscoop.com/c/vulnerabilities/pillow-memory-exhaustion-flaw-risks-service/AppSec Scoopen2026-10-19T22:03:39ZPillow memory exhaustion flaw risks service disruption for Python imaging workflowshttps://appsecscoop.com/c/vulnerabilities/mercury-framework-flaw-enables-unauthenticated/AppSec Scoopen2026-10-19T22:03:39ZMercury framework flaw enables unauthenticated remote code executionhttps://appsecscoop.com/c/vulnerabilities/moodys-data-reveals-87-day-median-patch-time-for/AppSec Scoopen2026-10-19T18:32:14ZMoody’s data reveals 87-day median patch time for exploited flawshttps://appsecscoop.com/c/vulnerabilities/ibm-mq-heap-overflow-risks-remote-code-execution/AppSec Scoopen2026-10-19T17:06:14ZIBM MQ Heap Overflow Risks Remote Code Execution and Denial of Servicehttps://appsecscoop.com/c/vulnerabilities/rapid7-urges-external-controls-for-ai-agents/AppSec Scoopen2026-10-19T17:00:46ZRapid7 urges external controls for AI agents posing insider riskshttps://appsecscoop.com/c/vulnerabilities/apache-camel-smooks-flaw-allows-attackers-to-read/AppSec Scoopen2026-10-19T11:13:46ZApache Camel Smooks flaw allows attackers to read local files and probe internal networkshttps://appsecscoop.com/c/vulnerabilities/quiz-and-survey-master-plugin-requires-urgent/AppSec Scoopen2026-10-19T09:59:52ZQuiz And Survey Master plugin requires urgent attention due to high-severity injection flawhttps://appsecscoop.com/c/vulnerabilities/bad-checksums-in-ipv4-packets-let-vms-escape/AppSec Scoopen2026-10-19T00:43:22ZBad checksums in IPv4 packets let VMs escape Linux KVM isolation in public and private clouds via CVE-2026-99999https://appsecscoop.com/c/vulnerabilities/projectsend-api-flaw-allows-token-holders-to/AppSec Scoopen2026-10-18T12:32:24ZProjectSend API flaw allows token holders to reset owner credentialshttps://appsecscoop.com/c/vulnerabilities/unpatched-snac2-heap-overflow-exposes-activitypub/AppSec Scoopen2026-10-18T12:15:46ZUnpatched snac2 Heap Overflow Exposes ActivityPub Servers to Remote Crashes