slither-mcp

Slither MCP Server A Model Context Protocol MCP server that provides static analysis capabilities for Solidity smart contracts using Slither. Overview This MCP server wraps Slither static analysis functionality, making it accessible through the Model Context Protocol. It can analyze Solidity...

DeFiHackLabs

DeFi Hacks Reproduce - Foundry Reproduce DeFi hack incidents using Foundry. 906 incidents included. Let's make Web3 secure! Join Discord Notion: 101 root cause analysis of past DeFi hacked incidents Transaction debugging tools Disclaimer: This content serves solely as a proof of concept showcasin...

evm-audit-helpers

evm-audit-helpers Overview evm-audit-helpers is a curated collection of Solidity snippets, Foundry scripts, and test templates designed to accelerate EVM smart‑contract security audits. The repository bundles reusable building blocks for common audit concerns such as reentrancy, storage layout...

CVE-2026-59358

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-59358 Write-up: https://abraxaslabs.tech/research/cve-2026-59358 CVE-2026-59358 Class: Privilege leftover Reach: Remote Cloud Foundry UAA v79.6.0 - VMware by Broadcom / Cloud Foundry Foundation I am...

CVE-2026-59386

A flaw was found in Cloud Foundry Controller CAPI. An authenticated user with SpaceSupporter permissions can improperly modify an application's start command or buildpack configuration, operations that should require elevated privileges. This privilege escalation can allow the unauthorized...

CVE-2026-59386: Cloud Foundry: A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper…

A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks...

GHSA-M665-V7PM-7GRJ vulnerabilities

Vulnerabilities for packages: nushell, codex, verus, foundry...

CVE-2026-115905 vulnerabilities

Vulnerabilities for packages: nushell, codex, verus, foundry...

EUVD-2026-108538

Server-side request forgery ssrf in Azure AI Foundry allows an authorized attacker to elevate privileges over a network...

CVE-2026-108456

Server-side request forgery ssrf in Azure AI Foundry allows an authorized attacker to elevate privileges over a network...

CVE-2026-108456

A Server-Side Request Forgery (SSRF) vulnerability exists in Azure AI Foundry . This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a High severity rating (CVSS 3.1 score of 7.7) and requires low privileges to exploit. While the impact is high regar...

Azure AI Foundry Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure AI Foundry allows an authorized attacker to elevate privileges over a network...

PT-2026-121669

Name of the Vulnerable Software and Affected Versions Azure AI Foundry affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server-side application to make...

KLA91369 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure AI Foundry can be exploited remotely to gain...

Microsoft Azure AI Foundry server-side request forgery vulnerability

Microsoft Azure AI Foundry has a server-side request forgery vulnerability. This vulnerability stems from its susceptibility to server-side request forgery attacks, which may allow authorized attackers to escalate their privileges over the network...

llm-foundry (0.11.0), modeva (>=1.0.14, <=2.1.0) potentially affected by CVE-2026-53995 via mlflow (2.15.1)

mlflow PYPI version 2.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - llm-foundry 0.11.0 - modeva =1.0.14, =2.1.0 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...

llm-foundry (>=0.9.1, <=0.10.0), mlflow-pytorch-exp (0.0.1) potentially affected by CVE-2026-53995 via mlflow (2.14.3)

mlflow PYPI version 2.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - llm-foundry =0.9.1, =0.10.0 - mlflow-pytorch-exp 0.0.1 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2026-53995 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQW...

databricks-genai (>=1.2.0a0, <=1.2.0a6), deeptrees (>=1.6.0, <=1.8.2) +1 more potentially affected by CVE-2026-53995 via mlflow (2.18.0)

mlflow PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - databricks-genai =1.2.0a0, =1.6.0, =0.15.1, =0.18.0 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...

databricks-genai (>=1.1.0, <=2.0.0a9), llm-foundry (>=0.12.0, <=0.14.5) +5 more potentially affected by CVE-2026-53995 via mlflow (2.16.2)

mlflow PYPI version 2.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - databricks-genai =1.1.0, =0.12.0, =0.0.3.post33, =0.0.16, =0.9.35rc0, =0.8.7, =0.8.8 Source cves: CVE-2026-53995 Source advisory:...