Arisu

Arisu — AI Key Automated Mining System Arisu is a tool that automatically scans public code repositories GitHub, GitLab, Gitee, Docker Hub, PyPI, npm, etc. and code snippets Gist, Issues, CommonCrawl, extracts AI service API keys DeepSeek, OpenAI, Anthropic, Kimi, etc., and verifies their validit...

CVE-2026-102923

Prior to version 1.6.0 , the SparkyFitness health and fitness tracker is vulnerable to Server-Side Request Forgery (SSRF) . The flaw exists because the components SparkyFitnessServer/services/chatService.ts and SparkyFitnessServer/services/labelScanService.ts fail to validate destinations provide...

CVE-2026-102923 SparkyFitness: SSRF via unvalidated custom_url in AI service settings

SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/services/chatService.ts and SparkyFitnessServer/services/labelScanService.ts do not validate destinations supplied in custom AI service settings. An authenticated user saves a...

CVE-2026-102923 SparkyFitness: SSRF via unvalidated custom_url in AI service settings

SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/services/chatService.ts and SparkyFitnessServer/services/labelScanService.ts do not validate destinations supplied in custom AI service settings. An authenticated user saves a...

EUVD-2026-97972

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process...

EUVD-2026-97974

IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

EUVD-2026-97975

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

EUVD-2026-97973

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-90911

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-90912

IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-90920

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-90921

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process...

CVE-2026-90911

The IBM Maximo AI Service (versions 9.1.0 and 9.2.0) is vulnerable to a denial of service (DoS) attack due to uncontrolled resource consumption (CWE-400). A remote attacker can exploit this flaw to exhaust system resources, potentially crashing the service. To remediate this vulnerability, IBM st...

CVE-2026-90911 Maximo AI Service Denial of Service

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-90912

IBM Maximo AI Service versions 9.1.0 and 9.2.0 SaaS are vulnerable to a Denial of Service (DoS) attack. The root cause is uncontrolled recursion (CWE-674), which could allow a remote attacker to crash the service. To remediate this vulnerability, IBM strongly recommends upgrading to Maximo AI Ser...

CVE-2026-90912 Maximo AI Service Denial of Service

IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-90920

The IBM Maximo AI Service versions 9.1.0 and 9.2.0 are vulnerable to a Code Injection vulnerability (CWE-94). A remote attacker can execute arbitrary code because of improper control over code generation. The vulnerability has a CRITICAL severity score of 9.8, allowing for high impact on confiden...

CVE-2026-90920 Maximo AI Service Code Injection

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-90921

IBM Maximo AI Service versions 9.1.0 and 9.2.0 are vulnerable to a Denial of Service (DoS) attack due to improper handling of malformed frames. The root cause is identified as CWE-130: Improper Handling of Length Parameter Inconsistency , which can lead to the termination of the host process when...

CVE-2026-90921 Maximo AI Service Denial of Service

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process...