UBUNTU-CVE-2026-30998

An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted input file...

CVE-2026-6141

A vulnerability was determined in danielmiessler PersonalAIInfrastructure up to 2.3.0. Affected is an unknown function of the file Skills/Parser/Tools/parseurl.ts. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclos...

CVE-2026-30998: Uncontrolled Resource Consumption

An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted input file...

RHEL 8 : go-toolset:rhel8 (RHSA-2026:7879)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7879 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: cmd/go: cmd/go:...

The Best Vulnerability Scanning Tools for 2026: A Complete Guide

Your vulnerability scanner found 14,000 issues last quarter. Your team patched 800. The other 13,200 are sitting in a spreadsheet that nobody opens anymore. This is the reality for most security teams. The scanner works. It finds vulnerabilities. But without context, prioritization, or a clear pa...

Machine Learning-Based Detection of MCP Attacks

The Model Context Protocol MCP is a new and emerging technology that extends the functionality of large language models, improving workflows but also exposing users to a new attack surface. Several studies have highlighted related security flaws, but MCP attack detection remains underexplored. To...

PT-2026-46806

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An out of bounds read in DevTools allows a remote attacker to execute arbitrary code inside a sandbox when a user opens a crafted HTML page. An out of bounds read occurs when the system...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, filebrowser, oras, cert-manager-cmctl, kubernetes, paranoia, rook, tofu-controller, aws-flb-kinesis, falcoctl, crane, k8ssandra-client, kyverno, redpanda, coredns, go, envconsul, witness, cilium-cli, external-dns, goreleaser, helm-set-status,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: filebrowser, cert-manager-cmctl, knative-serving, whereabouts, envoy-ratelimit, nri-couchbase, aws-flb-kinesis, q, falcoctl, crane, docker-credential-acr-env, hey, lazydocker, sbomqs, terraform-docs, consul-k8s, redpanda, addon-resizer, frp, cert-manager-csi-driver,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: filebrowser, cert-manager-cmctl, velero-plugin-for-aws, knative-serving, trust-manager, whereabouts, envoy-ratelimit, shfmt, nri-couchbase, aws-flb-kinesis, q, falcoctl, crane, docker-credential-acr-env, hey, lazydocker, sbomqs, terraform-docs, consul-k8s, redpanda,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: filebrowser, cert-manager-cmctl, knative-serving, whereabouts, envoy-ratelimit, nri-couchbase, aws-flb-kinesis, q, falcoctl, crane, docker-credential-acr-env, hey, lazydocker, sbomqs, terraform-docs, consul-k8s, redpanda, addon-resizer, frp, cert-manager-csi-driver,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-backup, kube-rbac-proxy-fips, chartmuseum, virt-handler, supercronic, newrelic-k8s-metadata-injection, kubernetes-dashboard-auth-fips, aws-flb-kinesis-fips, hivemind, external-dns-fips, kube-vip-fips, x509-certificate-exporter, yace-fips,...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: sqlite: lemon-3.52.0-1.1.hum1 aarch64, x8664 sqlite-3.52.0-1.1.hum1 aarch64, x8664 sqlite-analyzer-3.52.0-1.1.hum1 aarch64, x8664 sqlite-debug-3.52.0-1.1.hum1 aarch64, x8664...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libtasn1: libtasn1-4.21.0-1.1.hum1 aarch64, x8664 libtasn1-devel-4.21.0-1.1.hum1 aarch64, x8664 libtasn1-tools-4.21.0-1.1.hum1 aarch64, x8664 libtasn1-4.21.0-1.1.hum1.src src...

GHSA-G985-WJH9-QXXC PraisonAI Vulnerable to RCE via Automatic tools.py Import

PraisonAI automatically imports ./tools.py from the current working directory when launching certain components. This includes call.py, toolresolver.py, and CLI tool-loading paths. A malicious tools.py placed in the process working directory is executed immediately, allowing arbitrary Python code...

PraisonAI Vulnerable to RCE via Automatic tools.py Import

PraisonAI automatically imports ./tools.py from the current working directory when launching certain components. This includes call.py, toolresolver.py, and CLI tool-loading paths. A malicious tools.py placed in the process working directory is executed immediately, allowing arbitrary Python code...

PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading

PraisonAI automatically loads a file named tools.py from the current working directory to discover and register custom agent tools. This loading process uses importlib.util.specfromfilelocation and immediately executes module-level code via spec.loader.execmodule without explicit user consent,...

EUVD-2026-21508

PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic tools.py Loading...

GHSA-2G3W-CPC4-CHR4 PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading

PraisonAI automatically loads a file named tools.py from the current working directory to discover and register custom agent tools. This loading process uses importlib.util.specfromfilelocation and immediately executes module-level code via spec.loader.execmodule without explicit user consent,...

PraisonAI Vulnerable Untrusted Remote Template Code Execution

PraisonAI treats remotely fetched template files as trusted executable code without integrity verification, origin validation, or user confirmation, enabling supply chain attacks through malicious templates. --- Description When a user installs a template from a remote source e.g., GitHub,...