11725 matches found
AI Can Find Bugs, But Human Knowledge Still Proves Them
Artificial intelligence AI is changing offensive security, but it has not changed the standard that matters most: a finding has to be proven before it becomes useful. AI-assisted tools can read code quickly, generate payloads, summarize attack surfaces, explain unfamiliar APIs, and run repetitive...
KLA91159 PE vulnerability in Microsoft Products (ESU)
Privilege escalation vulnerability was found in Microsoft Products ESU. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-58598 Exploitation CVE list CVE-2026-58598 high KB list 5099539 Solution Install necessary updates from the KB section, that are...
EUVD-2026-44801
CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server...
EUVD-2026-44796
CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server...
CVE-2026-33443 Memory management error in Secure Access servers prior to 14.55
CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server...
CVE-2026-40956
CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak...
2026-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5099535)
2026-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems KB5099535...
2026-07 .NET 8.0.29 Security Update for x86 Client (KB5104032)
2026-07 .NET 8.0.29 Security Update for x86 Client KB5104032...
2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5099535)
2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems KB5099535...
2026-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5099538)
2026-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems KB5099538...
2026-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5099538)
2026-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems KB5099538...
2026-07 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5099539)
2026-07 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems KB5099539...
Security Bulletin: Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
Summary Langflow provides a visual interface for constructing and executing AI-powered agent workflows, exposing HTTP API endpoints for flow execution, file management, vector store operations, and Model Context Protocol MCP server configuration. An attacker could exploit insufficient validation...
Description of the security update for Office 2016: July 14, 2026 (KB5002273)
None None...
July 14, 2026âKB5099538 (OS Build 17763.9020)
None None...
July 14, 2026âKB5099444 (Monthly Rollup)
None None...
July 14, 2026âKB5099414 (OS Build 22631.7376)
None None...
July 14, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB5100990)
None None...
PYSEC-2026-2750 Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode
RAG ACL Bypass in Milvus Multitenancy Mode Summary This is a bypass of the fix for: - GHSA-h36f-rqpx-j5wx - CVE-2026-44560 - "Unauthorized File and Knowledge Base Content Access via RAG Vector Search" Open WebUI added collection-level ACL checks, but the patch can still be bypassed when Milvus...
Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File Enumeration
SummaryOpen WebUI has a Broken Object Level Authorization BOLA vulnerability in the builtin searchknowledgefiles tool.When native function calling is enabled and the selected model has no attached knowledge bases, an authenticated user can call searchknowledgefiles with an arbitrary knowledgeid...