CVE-2026-1772

RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges...

CVE-2026-1772

RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges...

CVE-2026-1772

CVE-2026-1772 concerns the RTU500 web interface, where an unprivileged user can read user management information. The vulnerability does not require UI access and can be exploited via browser developer tools, with no user interaction and network-based access. The CVSS 4.0 vector indicates: AV:N/A...

CVE-2026-1772

RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges...

EUVD-2026-8460

RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges...

PT-2026-21676

Name of the Vulnerable Software and Affected Versions RTU500 affected versions not specified Description An unprivileged user can read user management information through the RTU500 web interface. Accessing this information requires tools like browser development utilities and does not occur...

A Systematic Review of Algorithmic Red Teaming Methodologies for Assurance and Security of AI Applications

Cybersecurity threats are becoming increasingly sophisticated, making traditional defense mechanisms and manual red teaming approaches insufficient for modern organizations. While red teaming has long been recognized as an effective method to identify vulnerabilities by simulating real-world...

AZL-78314 CVE-2025-61145 affecting package libtiff for versions less than 4.6.0-11

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

A week in security (February 16 – February 22)

Last week on Malwarebytes Labs: Age verification vendor Persona left frontend exposed, researchers say Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets AI-generated passwords are a security risk Intimate products maker Tenga spilled customer data Meta patents ...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2969 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2969 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2969 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2970 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2970 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

Malicious Package

Overview rbxm-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-998 Malicious code in rbxm-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc90689ea111d792b6dc071f39e060c440f492130ef599233cf0c4526f55e4 The package rbxm-tools was found to contain malicious code. Source: ghsa-malware 8b70ded43c5def740a34e33c94903aa957ced0450fffd844a1e0f0d4122aea94 Any...

Malicious code in rbxm-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc90689ea111d792b6dc071f39e060c440f492130ef599233cf0c4526f55e4 The package rbxm-tools was found to contain malicious code. Source: ghsa-malware 8b70ded43c5def740a34e33c94903aa957ced0450fffd844a1e0f0d4122aea94 Any...

CVE-2025-61145: Double Free

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

connector-db-tools (0.0.1), pdf2dataset (>=0.1.0, <=0.4.0a1) +1 more potentially affected by CVE-2026-27482 via ray (0.8.6)

ray PYPI version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - connector-db-tools 0.0.1 - pdf2dataset =0.1.0, =0.4.10, =0.4.11 Source cves: CVE-2026-27482 Source advisory: OSV:PYSEC-2026-2271...