40 matches found
RTTM
Real Time Threat Monitoring Tool V2.0 Monitoring possible threats of your company on Internet is an impossible task to be achieved manually. Hence many threats of the company goes unnoticed until it becomes viral in public. Thus causing monetary/reputation damage. This is where RTTM comes into...
CVE-2026-118550
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI Artificial Intelligence allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...
DRUPAL-CONTRIB-2026-270
This module provides a framework for integrating Drupal with AI providers. Its AI Search submodule provides a Search API backend that stores content in a vector database for semantic search. The AI Search submodule has always been marked as 'experimental' but more importantly is deprecated. You m...
PT-2026-130579
This module provides a framework for integrating Drupal with AI providers. Its AI Search submodule provides a Search API backend that stores content in a vector database for semantic search. The AI Search submodule has always been marked as 'experimental' but more importantly is deprecated. You m...
DRUPAL-CONTRIB-2026-134
Update 2026-09-11: Increased risk score to reflect publicly documented methods for developing exploits. This module integrates amazee.ai's AI services into Drupal, including a Postgres/pgvector vector database backend for use with Search API AI Search. The module doesn't sufficiently sanitize...
This Is Flock’s AI Search Tool for Cops
WIRED rebuilt Flock’s latest search tool from code the company sends to a police officer’s browser. Its AI can keep watch across multiple cameras for anyone fitting a written description...
CVE-2026-19485
A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictab...
EUVD-2026-66653
A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictab...
CVE-2026-19485
CVE-2026-19485 is a Predictable Resource Name (bucket squatting) vulnerability in BigQuery Import Staging within Google Cloud Vertex AI Search for Commerce on Google Cloud Platform, affecting versions prior to 2026-04-27 . An attacker knowing the victim's project number could derive the predictab...
CVE-2026-19485 Bucket Squatting in Vertex AI Search for Commerce
A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictab...
CVE-2026-19485 Bucket Squatting in Vertex AI Search for Commerce
A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictab...
CVE-2026-19485: Use of Insufficiently Random Values
A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictab...
CVE-2026-56167
Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...
CVE-2026-56167
Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...
CVE-2026-56167 Azure AI Search Elevation of Privilege Vulnerability
...
CVE-2026-56167 Azure AI Search Elevation of Privilege Vulnerability
...
CVE-2026-56167
Technical details about CVE-2026-56167 are not publicly provided in the connected documents. Monitor for updates from Microsoft/MSRC and CVE databases for affected products, vulnerable components, versions, and remediation.
Azure AI Search Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...