490389 matches found
PT-2026-127807
In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate firmware record lengths The p54 firmware parser accesses component ID and component version records without checking that their lengths cover the fields being read. A malformed record can therefore make the...
GHSA-M65P-9J7Q-6W33 MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
Summary On MLflow tracking servers running without authentication, which is the default for mlflow server, a remote attacker can read arbitrary files from the server’s filesystem by creating a model version tagged as a prompt whose source is a schemeless local path. The fix for CVE-2026-2614 in...
MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
Summary On MLflow tracking servers running without authentication, which is the default for mlflow server, a remote attacker can read arbitrary files from the server’s filesystem by creating a model version tagged as a prompt whose source is a schemeless local path. The fix for CVE-2026-2614 in...
CVE-2026-116690 MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...
CVE-2026-116690 MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...
CVE-2026-116690 MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...
CVE-2026-116690
MLflow versions 3.10.0 through 3.16.1 are vulnerable to an arbitrary local file read vulnerability. The issue stems from the _create_model_version() function's prompt branch, which fails to perform path validation on schemeless relative sources (e.g., ../../etc) because validation only triggers w...
EUVD-2026-8832
Ajenti has potential Remote Code Execution...
CVE-2026-116897 REDAXO before 5.21.4 Missing Authorization in Version and History Previews
REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history frontend preview modes, which do not check category or clang permissions for the previewed article. Any backend user, or one holding historyarticlerollback, can set rexversion o...
EUVD-2026-110793
REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history frontend preview modes, which do not check category or clang permissions for the previewed article. Any backend user, or one holding historyarticlerollback, can set rexversion o...
CVE-2026-116897 REDAXO before 5.21.4 Missing Authorization in Version and History Previews
REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history frontend preview modes, which do not check category or clang permissions for the previewed article. Any backend user, or one holding historyarticlerollback, can set rexversion o...
CVE-2026-116897
REDAXO core versions prior to 5.21.4 are vulnerable to a missing authorization vulnerability within the structure/version and structure/history frontend preview modes. The underlying cause is a failure to verify category or clang permissions for previewed articles. Consequently, any backend user,...
Security Bulletin: Multiple security vulnerabilities have been found in Containerized version of IBM Guardium Key Lifecycle Manager
Summary Multiple security vulnerabilities have been addressed in Containerized version of IBM Guardium Key Lifecycle Manager. Vulnerability Details CVEID:CVE-2026-34481 DESCRIPTION: Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versio...
CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS
CVE-2021-27190 - PEEL Shopping, eCommerce shopping cart - Stored Cross-Site Scripting Vulnerability in 'Address' Date 2021-02-11 Exploit Author Anmol K Sachan Vendor Homepage https://www.peel.fr/ Software Link https://www.peel.fr/nos-offres-1/peel-shopping-31.html...
Invoke-ATTACKAPI
Invoke-ATTACKAPI DEPRECATED WE RECOMMEND TO USE: https://github.com/Cyb3rWard0g/ATTACK-Python-Client A PowerShell script to interact with the MITRE ATT&CK Framework via its own API in order to gather information about techniques, tactics, groups, software and references provided by the MITRE ATT&...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Research Lab v0.1 Defensive, offline PHP version as...
PT-2026-127223
Name of the Vulnerable Software and Affected Versions MLflow versions 3.10.0 through 3.16.1 Description An issue exists where a remote caller can read arbitrary files from the server filesystem with the privileges of the server process. This occurs because the prompt branch in the create model...
PT-2026-126362
REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history frontend preview modes, which do not check category or clang permissions for the previewed article. Any backend user, or one holding historyarticle rollback, can set rex version...
CVE-2026-77061 Missing Authentication for Critical Function in boneIO
boneIO Black directly excludes several API endpoints from the authentication. An unauthenticated remote attacker on the local network can retrieve system logs, firmware version, serial number, MQTT username, configuration file listings, and API documentation. This data aids reconnaissance and...
CVE-2026-98878
A flaw was found in the Linux kernel's Generic Interrupt Controller version 5 GICv5 driver. The driver delayed dropping an interrupt's priority until full deactivation rather than immediately after acknowledging it. When an interrupt remains active during a long-running operation or guest virtual...