Lucene search
+L

16661 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/15 5:38 p.m.16 views

Malicious code in databricks-tools-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9ecf172545ef84f1fcbeeae028a55d2bb570d68a3356a26526269e267f184a10 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

5.6AI score
SaveExploits0References1
OSV
OSV
added 2026/06/15 5:38 p.m.21 views

MAL-2026-5809 Malicious code in databricks-tools-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9ecf172545ef84f1fcbeeae028a55d2bb570d68a3356a26526269e267f184a10 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

5.6AI score
SaveExploits0References1
Fedora
Fedora
added 2026/06/15 1:11 a.m.20 views

[SECURITY] Fedora 43 Update: bind9-next-9.21.22-2.fc43

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

9.8CVSS5.3AI score0.01874EPSS
SaveExploits1
Fedora
Fedora
added 2026/06/15 12:51 a.m.13 views

[SECURITY] Fedora 44 Update: bind9-next-9.21.22-2.fc44

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

9.8CVSS5.3AI score0.01874EPSS
SaveExploits1
Spring Security Advisories
Spring Security Advisories
added 2026/06/15 12:0 a.m.29 views

Tool Calling in Spring AI 2.0: A Composable, Agentic Architecture

Tool calling — the ability for an AI model to invoke application-defined functions and act on the results — is the essential building block of agentic AI systems. A model that can discover information, take action, and loop until a goal is reached is an agent. Spring AI 2.0 rearchitects tool...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/15 12:0 a.m.29 views

PT-2026-49187

Name of the Vulnerable Software and Affected Versions OttoKit versions prior to 1.1.28 Description Unauthenticated PHP Object Injection occurs in the software. PHP Object Injection is a vulnerability that allows an attacker to pass malicious serialized objects into the application, which can lead...

9.8CVSS6AI score0.005EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/06/12 11:53 p.m.112 views

kiro-cybersecurity-skills

CyberSecurity Skills A collection of 15 security workflows co...

5.5AI score
SaveExploits0
Cvelist
Cvelist
added 2026/06/12 6:44 p.m.42 views

CVE-2026-50287 Missing Authentication for Critical Function in @agenticmail/mcp

AgenticMail gives AI agents real email addresses and phone numbers. Prior to version 0.9.27, @agenticmail/mcp exposes a Streamable HTTP transport when started with --http or MCPHTTP=1. In that mode, the /mcp endpoint accepts requests without any HTTP authentication layer. A remote client can...

8.7CVSS0.00359EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/12 4:16 p.m.18 views

CVE-2026-40677

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution...

7.7CVSS0.00435EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/12 2:29 p.m.17 views

EUVD-2026-36488

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution...

7.7CVSS5.7AI score0.00435EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/12 2:29 p.m.60 views

CVE-2026-40677

The vulnerability CVE-2026-40677 affects AMD optional tools that use insecure HTTP transport, enabling a potential attacker to perform a man-in-the-middle attack and potentially achieve arbitrary code execution. The issue stems from unencrypted transport within these tools, which could allow inte...

7.7CVSS5.7AI score0.00435EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/12 2:29 p.m.14 views

CVE-2026-40677

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution...

7.7CVSS5.7AI score0.00435EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/12 2:29 p.m.43 views

CVE-2026-40677

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution...

7.7CVSS0.00435EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/06/12 9:19 a.m.247 views

Exploit for CVE-2026-35273

🚨 CVE-2026-35273 - Oracle PeopleSoft PeopleTools Unauthenticat...

9.8CVSS6.3AI score0.95473EPSS
SaveExploits3
NCSC
NCSC
added 2026/06/12 7:25 a.m.14 views

Vulnerability handling in Oracle PeopleSoft Enterprise PeopleTools

Oracle has identified a vulnerability in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62. This vulnerability allows unauthorized attackers to exploit the system via HTTP remotely. This can lead to remote code execution, which may result in the complete takeover of the system. The...

9.8CVSS6.1AI score0.95473EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2026/06/12 12:0 a.m.23 views

PT-2026-48888

Name of the Vulnerable Software and Affected Versions AMD optional tools affected versions not specified Description The use of insecure HTTP transport within the auto-updater allows for a man-in-the-middle attack, which is a technique where an attacker intercepts communication between two partie...

7.7CVSS5.6AI score0.00435EPSS
SaveExploits0References7
NVD
NVD
added 2026/06/11 9:16 p.m.16 views

CVE-2026-53818

OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip owner-only tool policies and before-tool-call hooks. Attackers can invoke owner-only behavior through the affected loopback path to execute restricted tools...

6.9CVSS0.00096EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/11 9:16 p.m.14 views

CVE-2026-53814

OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly receive owner-scoped MCP loopback authority instead of hook-appropriate scope. Attackers with a valid hook token can exploit the /hooks/agent endpoint to cause spawned CLI runtimes ...

8.7CVSS0.00281EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/11 9:13 p.m.9 views

Incorrect Privilege Assignment

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Privilege Assignment due to the incorrect assignment of owner-scoped MCP loopback authority to hook-triggered agent processes. An attacker can perform unauthorized privileged...

8.7CVSS5.9AI score0.00281EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/06/11 8:48 p.m.14 views

CVE-2026-12024

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.4AI score0.00158EPSS
SaveExploits0
Rows per page
Query Builder