CVE-2026-103544

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...

ollama-consumer

ollama-consumer Demo consumer app pinned to github.com/ollama/ollama v0.5.0 — used by Endor Labs to demonstrate vulnerability detection and exploit-chain analysis against the upstream ollama library...

ThreatDetect

ThreatDetect ThreatDetect is a Streamlit-based insider threat detection prototype that analyzes employee activity data and flags potentially risky behavior. It uses a trained XGBoost classifier together with an Isolation Forest anomaly detector to produce organisation-level risk summaries and...

URL_CHECKER

URL Phishing Checker A lightweight, web-based tool that detects whether a URL is likely phishing or safe using a hybrid approach of Machine Learning Random Forest/SVM and heuristic rule-based analysis. Built for educational purposes and experimentation in cybersecurity and applied AI. Overview...

Olyx

Olyx A modern Android application for comprehensive URL security analysis, combining multiple threat detection APIs with advanced domain spoofing detection to protect users from malicious websites. Screenshots Features Multi-API Security Analysis AbuseIPDB : Scans IP reputation for reported...

EUVD-2026-90521

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...

CVE-2026-103544 datadrivenconstruction OpenConstructionERP Al Provider Configuration ai_client.py wrong session

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...

CVE-2026-103544

A vulnerability exists in datadrivenconstruction OpenConstructionERP up to version 14.8.1 within the AI Provider Configuration Handler component. Specifically, an unknown function in the file backend/app/modules/ai/ai_client.py allows for data manipulation that results in the exposure of data ele...

CVE-2026-103544 datadrivenconstruction OpenConstructionERP Al Provider Configuration ai_client.py wrong session

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, dask-kubernetes, kubeflow-katib, kserve, kubeflow-pipelines-visualization-server, open-webui, k8s-sidecar, kubeflow-jupyter-web-app, datadog-agent, ggshield, kubeflow-volumes-web-app, az, jupyter-base-notebook...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, dask-kubernetes, kubeflow-katib, kserve, kubeflow-pipelines-visualization-server, open-webui, k8s-sidecar, kubeflow-jupyter-web-app, datadog-agent, ggshield, kubeflow-volumes-web-app, az, jupyter-base-notebook...

CVE-2026-103533 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

CVE-2026-103532 immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared Link Preview Handler. The manipulation of the argument Password leads to improper authorization. The attack may be...

CVE-2026-103532

The immich-app Immich software, version up to 2.7.5 , is vulnerable to an improper authorization flaw. The issue resides in the Shared Link Preview Handler component, specifically within the checkSharedLinkAccess function of the server/src/utils/access.ts file. By manipulating the Password argume...

CVE-2026-103532 immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared Link Preview Handler. The manipulation of the argument Password leads to improper authorization. The attack may be...

PT-2026-104009

Name of the Vulnerable Software and Affected Versions Filament versions 4.0.0 through 4.13.2 Filament versions 5.0.0 through 5.8.2 Description App-based multi-factor authentication MFA management actions do not consistently require confirmation of the current password. An attacker with access to ...

AlmaLinux 9.2 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.2:CLSA-2026:1789979782)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789979782 advisory. - In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated...

AlmaLinux 9.2 [TuxCare] Security Update: perl-App-cpanminus / perl-App-cpanminus-tests (ALMALINUX9.2:CLSA-2025:1762957887)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762957887 advisory. - The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers...

Rocky Linux 9 [CIQ] Security Update: perl-App-cpanminus (crlsa-2024_10218)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202410218 advisory. perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability CVE-2024-45321 Tenable has extracted the preceding description block direct...

CVE-2026-103544: Exposure of Data Element to Wrong Session

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...