Fake Xeno and Roblox Utilities Used to Install Windows RAT, Microsoft Warns

Fake Xeno and Roblox gaming tools are spreading a Windows RAT remote access trojan using PowerShell and LOLBins, Microsoft Threat Intelligence warns...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: druid, gradle, thingsboard, wildfly, solr, cass-config-builder, nextflow, neo4j, tez, jenkins, gradle-stage0, apache-nifi-registry, logstash, wavefront-proxy, spark, apache-pulsar, apache-nifi, zipkin, dependency-track, spdx-tools-java, apache-tika, kserve-modelmesh,...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: flyway-fips, kserve-modelmesh, apache-nifi, logstash, tritonserver-backend-vllm-cuda-12.9, apache-tika, ontop, opensearch-fips, kafka-fips, hono, pinot, ruby3.2-jrjackson, cass-config-builder-fips, apache-tika-fips, jenkins-plugin-manager, ruby3.4-jrjackson,...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2026-28416 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2026-28416 Source advisory: OSV:GHSA-JMH7-G254-2CQ9...

harmonai-tools (>=0.0.6, <=0.0.7), stable-audio-tools (>=0.0.7, <=0.0.10) potentially affected by CVE-2026-28416 via gradio (3.42.0)

gradio PYPI version 3.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - harmonai-tools =0.0.6, =0.0.7, =0.0.10 Source cves: CVE-2026-28416 Source advisory: OSV:GHSA-JMH7-G254-2CQ9...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2026-28415 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2026-28415 Source advisory: OSV:GHSA-PFJF-5GXR-995X...

harmonai-tools (>=0.0.6, <=0.0.7), stable-audio-tools (>=0.0.7, <=0.0.10) potentially affected by CVE-2026-28415 via gradio (3.42.0)

gradio PYPI version 3.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - harmonai-tools =0.0.6, =0.0.7, =0.0.10 Source cves: CVE-2026-28415 Source advisory: OSV:GHSA-PFJF-5GXR-995X...

harmonai-tools (>=0.0.6, <=0.0.7), stable-audio-tools (>=0.0.7, <=0.0.10) potentially affected by CVE-2026-28414 via gradio (3.42.0)

gradio PYPI version 3.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - harmonai-tools =0.0.6, =0.0.7, =0.0.10 Source cves: CVE-2026-28414 Source advisory: OSV:GHSA-39MP-8HJ3-5C49...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2026-28414 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2026-28414 Source advisory: OSV:GHSA-39MP-8HJ3-5C49...

PT-2026-41180

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.8.6 Description A flaw in the chat completion API allows users to bypass tool restrictions, potentially leading to unauthorized actions or access. In the '/api/chat/completions' endpoint, the tool ids and tool...

RedTeam-MCP

🔴 RedTeam-MCP AI-Powered Autonomous Red Team Framework vi...

Buffer Overflow

psd-tools is vulnerable to Buffer Overflow. The vulnerability is due to malformed RLE-compressed image data, where decoderle raises ValueError which propagated all the way to the user, crashing psd.composite and psd-tools export, and attackers can exploit it by crafting a PSD file with malformed...

criscostack (1.0.0), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-28351 via pypdf (3.9.1)

pypdf PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - criscostack 1.0.0 - neumai =0.0.9, =0.0.17, =2023.6.0, =2024.4.0 Source cves: CVE-2026-28351 Source advisory: OSV:GHSA-F2V5-7JQ9-H8CG...

harmonai-tools (>=0.0.6, <=0.0.7), stable-audio-tools (>=0.0.7, <=0.0.10) potentially affected by CVE-2026-28415 via gradio (3.42.0)

gradio PYPI version 3.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - harmonai-tools =0.0.6, =0.0.7, =0.0.10 Source cves: CVE-2026-28415 Source advisory: OSV:PYSEC-2026-65...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2026-28415 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2026-28415 Source advisory: OSV:PYSEC-2026-65...

harmonai-tools (>=0.0.6, <=0.0.7), stable-audio-tools (>=0.0.7, <=0.0.10) potentially affected by CVE-2026-28414 via gradio (3.42.0)

gradio PYPI version 3.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - harmonai-tools =0.0.6, =0.0.7, =0.0.10 Source cves: CVE-2026-28414 Source advisory: OSV:PYSEC-2026-64...

harmonai-tools (>=0.0.6, <=0.0.7), stable-audio-tools (>=0.0.7, <=0.0.10) potentially affected by CVE-2026-28416 via gradio (3.42.0)

gradio PYPI version 3.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - harmonai-tools =0.0.6, =0.0.7, =0.0.10 Source cves: CVE-2026-28416 Source advisory: OSV:PYSEC-2026-66...

RHSA-2026:3428 Red Hat Security Advisory: container-tools:rhel8 security update

Bulletin has no description...

Trojanized Gaming Tools Spread Java-Based RAT via Browser and Chat Platforms

Threat actors are luring unsuspecting users into running trojanized gaming utilities that are distributed via browsers and chat platforms to distribute a remote access trojan RAT. "A malicious downloader staged a portable Java runtime and executed a malicious Java archive JAR file named...

container-tools:rhel8 security update

An update is available for module.skopeo, aardvark-dns, crun, module.udica, module.cockpit-podman, module.criu, conmon, runc, containernetworking-plugins, python-podman, toolbox, module.oci-seccomp-bpf-hook, module.containers-common, podman, module.aardvark-dns, module.libslirp, fuse-overlayfs,...