Lucene search
+L

47188 matches found

HackRead
HackRead
•added 2026/07/01 8:52 p.m.•35 views

The Cost of Non-Compliance: Why AI Governance Is the New Enterprise Imperative

AI governance helps enterprises control tool use, reduce compliance risk, protect customer data, and avoid fines as teams adopt AI faster than policy...

5.8AI score
SaveExploits0
Snyk
Snyk
•added 2026/07/01 8:35 p.m.•15 views

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the addLabelsFromOptions function. An attacker can overwrite security-sensitive namespace labels by pushing changes to a monitored repository, thereby weakening admission controls and enabling...

8.8CVSS8AI score0.00442EPSS
SaveExploits0References2
HackRead
HackRead
•added 2026/07/01 6:10 p.m.•38 views

Ransomware-Proof Backup: 7 Strategies for Enterprise IT Teams

Ransomware-proof backup planning helps IT teams protect clean data copies, isolate storage, test recovery, and keep operations running after cyber attacks fast...

5.8AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/07/01 5:10 p.m.•21 views

CVE-2026-5051 Audit Log Plugin Directory Guard Bypass via Legacy path Option

HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit path option was used. This vulnerability CVE-2026-5051 is fixed in 2.0.1, 1.21.6, 1.20.11, and 1.19.17...

4.4CVSS5.9AI score0.00384EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/01 3:17 p.m.•34 views

CVE-2026-23537

A vulnerability has been identified in the Feast Feature Server’s /save-document endpoint that allows an unauthenticated remote attacker to write arbitrary JSON files to the server's filesystem. Although the system attempts to restrict file locations, these protections can be bypassed, enabling a...

9.1CVSS0.01049EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/01 1:32 p.m.•96 views

CVE-2026-53329

CVE-2026-53329 affects the Linux kernel drm/amd/display code, specifically dal_vector_reserve(), where allocation size was computed as capacity * vector->struct_size using uint32_t arithmetic. Overflow could cause krealloc to allocate a smaller buffer, leading to heap overflows on subsequent v...

7CVSS6AI score0.00142EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
•added 2026/07/01 1:32 p.m.•78 views

CVE-2026-53329 drm/amd/display: Use krealloc_array() in dal_vector_reserve()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use kreallocarray in dalvectorreserve Why & How dalvectorreserve computes the allocation size as "capacity vector-structsize" using uint32t arithmetic, which can silently wrap to a small value on overflow. This...

7CVSS0.00142EPSS
SaveExploits0References8
HackRead
HackRead
•added 2026/07/01 12:00 p.m.•36 views

Mitigating Attacks Before They Impact Infrastructure: Link11 provides next generation network DDoS protection

Frankfurt am Main, Deutschland, 1st July 2026, CyberNewswire...

5.8AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2026/07/01 10:41 a.m.•42 views

Microsoft Accelerates Post-Quantum Cryptography Shift to 2029

Microsoft on Tuesday said it's accelerating its quantum safe security roadmap, stating technology advances in quantum computing are making it essential to replace existing encryption standards sooner than previously expected. "Advances in quantum research and development have shifted the risk...

5.9AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/07/01 7:52 a.m.•61 views

CVE-2026-10540 Weak password hash protection in Control-M/Entreprise Manager

The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupported versions 9.0.20.x and potentiall...

5.6CVSS0.00106EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/01 3:43 a.m.•40 views

EUVD-2026-40897

The Youtube Showcase plugin for WordPress is vulnerable to Arbitrary Function Call in versions up to and including 4.0.3. This is due to insufficient validation of the 'path' parameter in the emddeletefile AJAX handler in includes/common-functions.php. The user-supplied value is passed through...

7.5CVSS5.9AI score0.00517EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/07/01 3:18 a.m.•26 views

SUSE CVE-2026-53116

In the Linux kernel, the following vulnerability has been resolved: s390/ap: use generic driveroverride infrastructure When the AP masks are updated via apmaskstore or aqmaskstore, apbusrevisebindings is called after apattrmutex has been released. This calls aprevisereserved, which accesses the...

5.8AI score0.00165EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/07/01 12:00 a.m.•56 views

GitLab Code Generation Data Compromise

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to improper code generation management. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

4.3CVSS5.8AI score0.00362EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/01 12:00 a.m.•19 views

7-Zip Data Protection Breach

The vulnerability of 7-Zip refers to a flaw in the data protection mechanism implemented by Mark of the Web MOTW. Exploiting this vulnerability allows attackers to bypass existing security measures and perform spear-phishing attacks...

3.3CVSS7.1AI score0.00171EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/01 12:00 a.m.•21 views

Splunk Enterprise Data Compromise

The vulnerability of the Splunk Enterprise platform for operational analysis is related to improper handling of data with Unicode encoding. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.1CVSS5.8AI score0.00246EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/07/01 12:00 a.m.•15 views

NETAMS WNAM user management software Session Interception

The vulnerability of NETAMS WNAM user management software lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to remotely intercept a session and gain control of another user’s control interface...

7.6CVSS6.1AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/01 12:00 a.m.•20 views

Duo Workflows Unauthorized Access

The vulnerability of the Duo Workflows software tool, a git-based programming platform for collaborative code development in GitLab EE/CE, is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

8.6CVSS6.4AI score0.00627EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
•added 2026/06/30 11:20 p.m.•25 views

Protection Mechanism Failure

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Protection Mechanism Failure via the trace.Trace.runctx function. An attacker can execute arbitrary code by crafting a malicious pickle file th...

8.1CVSS6.6AI score0.00716EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/30 10:39 p.m.•19 views

CVE-2026-14107

Use after free in Scheduling in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

8.8AI score0.00383EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/30 3:54 p.m.•37 views

EUVD-2026-40353

Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability that allows denied clients to circumvent IP-based access restrictions by sending WebSocket upgrade requests. The WebSocket upgrade pipeline branch configured via MapWhen in OcelotPipelineExtensions.cs...

9.3CVSS5.9AI score0.00565EPSS
SaveExploits0References4
Rows per page
Query Builder