Lucene search
+L

4961 matches found

OSV
OSV
added 2026/05/05 9:15 p.m.6 views

GHSA-JXH8-JH77-XH6G @evomap/evolver's validator sandbox allowlist permits `npm`/`npx`, yielding RCE from Hub-delivered validation tasks via lifecycle scripts

Summary The validator-mode sandbox executor src/gep/validator/sandboxExecutor.js places npm and npx in its hard executable allowlist. Because npm install and npx -y -p execute arbitrary code by design preinstall/install/postinstall lifecycle scripts and remote-package bin entries, and because...

8.1CVSS6.7AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/05 9:15 p.m.15 views

External Control of File Name or Path

Overview @evomap/evolver is an A GEP-powered self-evolution engine for AI agents. Features automated log analysis and Genome Evolution Protocol GEP for auditable, reusable evolution assets. Affected versions of this package are vulnerable to External Control of File Name or Path via the fetch...

8.8CVSS6.1AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/05/05 9:15 p.m.19 views

@evomap/evolver: Path Traversal in `evolver fetch` default-branch `safeId` allows Hub-controlled overwrite of project files (RCE)

Summary The evolver fetch subcommand in index.js writes Hub-supplied bundledfiles into a directory derived from a Hub-supplied skillid. When --out is not used, the path-sanitizing regex permits . characters, allowing a skillid of .. to escape the skills/ subdirectory and resolve to the user's...

6.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/05/05 9:15 p.m.39 views

GHSA-CFCJ-HQPF-HCCF @evomap/evolver: Path Traversal in `evolver fetch` default-branch `safeId` allows Hub-controlled overwrite of project files (RCE)

Summary The evolver fetch subcommand in index.js writes Hub-supplied bundledfiles into a directory derived from a Hub-supplied skillid. When --out is not used, the path-sanitizing regex permits . characters, allowing a skillid of .. to escape the skills/ subdirectory and resolve to the user's...

8.8CVSS6.4AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/05/05 4:10 p.m.21 views

Critical: Red Hat Security Advisory: Red Hat Developer Hub 1.9.4 release.

Red Hat Developer Hub 1.9.4 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

9.9CVSS7AI score0.02566EPSS
SaveExploits16References35
CNNVD
CNNVD
added 2026/05/05 12:00 a.m.23 views

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.9 contained security vulnerabilities. These vulnerabilities were caused by environmental variable injection, allowing malicious workarea.env files to set runtime control...

8.8CVSS5.8AI score0.00203EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/04 6:40 p.m.13 views

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (April 2026 - Part 2 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the...

10CVSS6.8AI score0.00765EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/01 5:38 a.m.17 views

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (April 2026 - Part 1 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-23949 DESCRIPTION: jaraco.context, an open-source software package that...

8.6CVSS7.3AI score0.00559EPSS
SaveExploits3Affected Software1
NVD
NVD
added 2026/04/30 2:16 p.m.7 views

CVE-2026-7163

A vulnerability in the assisted-service REST API, an optional Assisted Installer assisted-service component in the Multicluster Engine MCE, allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbitrary clusters provisioned through the hub...

6.1CVSS0.00194EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/04/30 1:18 p.m.12 views

CVE-2026-7163

A vulnerability in the assisted-service REST API, an optional Assisted Installer assisted-service component in the Multicluster Engine MCE, allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbitrary clusters provisioned through the hub...

6.1CVSS5.7AI score0.00194EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/30 1:18 p.m.10 views

CVE-2026-7163 Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure

A vulnerability in the assisted-service REST API, an optional Assisted Installer assisted-service component in the Multicluster Engine MCE, allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbitrary clusters provisioned through the hub...

6.1CVSS5.7AI score0.00194EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/04/30 1:18 p.m.6 views

CVE-2026-7163

A vulnerability in the assisted-service REST API, an optional Assisted Installer assisted-service component in the Multicluster Engine MCE, allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbitrary clusters provisioned through the hub...

6.1CVSS5.7AI score0.00194EPSS
SaveExploits0References9
CVE
CVE
added 2026/04/30 1:18 p.m.42 views

CVE-2026-7163

CVE-2026-7163 affects the Assisted-service REST API in the Multicluster Engine (MCE) used with Red Hat ACM/MCE on-prem deployments. An authenticated user with minimal namespace privileges can obtain administrative credentials (the kubeadmin password) and kubeconfig for any cluster provisioned thr...

6.1CVSS5.7AI score0.00194EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2026/04/30 1:18 p.m.100 views

CVE-2026-7163 Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure

A vulnerability in the assisted-service REST API, an optional Assisted Installer assisted-service component in the Multicluster Engine MCE, allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbitrary clusters provisioned through the hub...

6.1CVSS0.00194EPSS
SaveExploits0References8
Chainguard
Chainguard
added 2026/04/30 1:18 a.m.15 views

GHSA-MW35-8RX3-XF9R vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9...

5.2AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/04/30 12:00 a.m.13 views

One Single Hub Text Breaks CLIP: Identifying Vulnerabilities in Cross-Modal Encoders Via Hubness

The hubness problem, in which hub embeddings are close to many unrelated examples, occurs often in high-dimensional embedding spaces and may pose a practical threat for purposes such as information retrieval and automatic evaluation metrics. In particular, since cross-modal similarity between tex...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/04/27 10:26 p.m.134 views

Exploit-Hub

No d...

5.3AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/04/26 6:09 p.m.138 views

Advanced-AI-Recon-and-Exploit-Framework

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner...

6.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/04/25 1:39 a.m.7 views

SUSE CVE-2026-31542

In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Handle deconfigured sockets When a socket is deconfigured, it's mapped to SOCKEMPTY 0xffff. This causes a panic while allocating UV hub info structures. Fix this by using NUMANONODE, allowing UV hub info structur...

5.5CVSS5.5AI score0.00122EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/25 12:00 a.m.14 views

AIRA Hub 代码问题漏洞

AIRA Hub is an internet center developed by IhateCreatingUserNames2, designed for discovering and broadcasting MCP tools and A2A skills. There are code vulnerabilities in AIRA Hub, stemming from the function connectstreamendpoint/syncagents in the AiraHub.py file within the component Endpoint...

6.5CVSS6.6AI score0.00252EPSS
SaveExploits0References2
Rows per page
Query Builder