19847 matches found
Use of Weak Hash
Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Use of Weak Hash in the mlflow.data.digestutils function. An...
com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0) potentially affected by CVE-2026-44488 via org.webjars.npm:axios (1.7.2)
org.webjars.npm:axios MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:axios and may be impacted: - com.github.linyuzai:concept-plugin-spring-boot-starter =2.0.0, =3.0.0 Source cves: CVE-2026-44488 Source advisory:...
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories
It got stupid again. The internet still feels held together with tape. Bad plugins, old bugs, fake tools, trusted apps doing shady things. Same mess, new wrapper. And now the weird stuff is normal. Forums go down and come back worse. Cheap hackers get better toys. AI starts breaking real systems...
Lack of transparency in Cisco Unified Communications Manager
Cisco has identified a vulnerability in Unified Communications Manager CM and Unified Communications Manager Session Management Edition CM SME. A malicious individual could exploit this vulnerability to carry out a Server-Side Request Forgery SSRF attack. Successful exploitation could result in t...
CVE-2026-54353
creationtimestamp| type| source ---|---|--- 2026-06-04 08:57:12+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-gfq7-5x4g-3xhf 2026-06-26 21:59:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wwbufwl2l 2026-06-28 11:00:56+00:00|...
CVE-2026-54351
creationtimestamp| type| source ---|---|--- 2026-06-04 08:55:20+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-rgvg-3wpc-h44p 2026-06-26 21:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wjwi2zx2m 2026-06-26 22:07:44+00:00|...
CVE-2026-53755
creationtimestamp| type| source ---|---|--- 2026-06-04 08:37:00+00:00| published-proof-of-concept| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-6qhc-x826-342c 2026-06-23 21:04:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moycht3map2r 2026-06-24 09:11:18+00:00...
CVE-2026-54096
creationtimestamp| type| source ---|---|--- 2026-06-04 05:54:39+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-3q2p-72cj-682c...
PT-2026-46888
Name of the Vulnerable Software and Affected Versions Shopware versions 6.7.3.0 through 6.7.10.0 Description An open redirect exists in the public SSO entry point at GET /api/oauth/sso/auth. When the endpoint is accessed without the expected SSO session state, the application uses the Referer...
CVE-2026-49144
creationtimestamp| type| source ---|---|--- 2026-06-03 21:38:40+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8rpw-6cqh-2v9h 2026-06-03 23:10:53+00:00| seen| https://gist.github.com/alon710/f7bc5351b219485c56b8d23a92985578 2026-06-03 23:20:57+00:00| seen|...
CVE-2026-35906
creationtimestamp| type| source ---|---|--- 2026-06-03 17:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87170 2026-06-03 21:00:04+00:00| seen| Telegram/kE9cLUPBGVlQM0eKet2aE5O-03aGK7deKtr42pLnxraAufk...
CVE-2026-35905
creationtimestamp| type| source ---|---|--- 2026-06-03 17:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87170 2026-06-03 21:00:04+00:00| seen| Telegram/kE9cLUPBGVlQM0eKet2aE5O-03aGK7deKtr42pLnxraAufk...
CVE-2026-35904
creationtimestamp| type| source ---|---|--- 2026-06-03 17:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87170 2026-06-03 19:00:30+00:00| seen| Telegram/Ze-uNkS3kIdAJGbWQE6AK--K-SMWz6YbrFE-sDGCdUicf4Q 2026-06-03 21:00:04+00:00| seen|...
GHSA-PH9P-34F9-6G65
creationtimestamp| type| source ---|---|--- 2026-06-03 14:45:48+00:00| published-proof-of-concept| https://t.me/bdufstecru/3217...
GHSA-XJXG-64P4-VJ4M
creationtimestamp| type| source ---|---|--- 2026-06-03 14:41:54+00:00| published-proof-of-concept| https://t.me/bdufstecru/3214...
CVE-2026-54094
creationtimestamp| type| source ---|---|--- 2026-06-03 11:43:02+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-239w-m3h6-ch8v...
CVE-2026-54092
creationtimestamp| type| source ---|---|--- 2026-06-03 09:33:53+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-w5fm-68j4-fpc4...
CVE-2026-41234
creationtimestamp| type| source ---|---|--- 2026-06-03 08:21:39+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-37m5-m4q3-fc6x...
