59052 matches found
RansomTrack: A Hybrid Behavioral Analysis Framework for Ransomware Detection
Ransomware poses a serious and fast-acting threat to critical systems, often encrypting files within seconds of execution. Research indicates that ransomware is the most reported cybercrime in terms of financial damage, highlighting the urgent need for early-stage detection before encryption is...
📄 Vaadin 25.x Authentication Bypass
An authentication bypass affects Vaadin versions 6.8.13, 14.x, 23.x, 24.x, and 25.x when used with Spring Security, due to inconsistent path pattern matching on reserved framework routes. Accessing the /VAADIN endpoint without a trailing slash can bypass security filters, allowing unauthenticated...
OpenPLC Runtime version 3 安全漏洞
OpenPLC Runtime version 3 is a programmable logic controller developed by Thiago Alves. There is a security vulnerability in OpenPLC Runtime version 3. This vulnerability stems from the REST API endpoints only checking the existence of JWTs without verifying the caller’s role. This could allow...
CVE-2026-40029
creationtimestamp| type| source ---|---|--- 2026-04-08 23:41:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizhssed572z 2026-04-09 01:27:57+00:00| published-proof-of-concept| Telegram/FNxyO19LE7y9kKO2yVURtyHZPYuEYu862yh0OCJKtv1fs 2026-04-09 05:15:18+00:00| seen|...
GHSA-RFJ5-58HV-WC5F
creationtimestamp| type| source ---|---|--- 2026-04-08 23:33:06+00:00| seen| Telegram/nb1jq11aD1wlJ1YglJrLy9zN5IvfOUCCPtd3YJ7-KFKCMzY...
CVE-2026-40027
creationtimestamp| type| source ---|---|--- 2026-04-08 23:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizhavfwp52j 2026-04-09 01:27:57+00:00| published-proof-of-concept| Telegram/FNxyO19LE7y9kKO2yVURtyHZPYuEYu862yh0OCJKtv1fs...
CVE-2025-7360
creationtimestamp| type| source ---|---|--- 2026-04-08 23:31:01+00:00| seen| Telegram/-5CZewN2LChOSTaNFZSXdy0eNKAn7ggKAN00PMoPD6FJ4...
CVE-2026-40032
creationtimestamp| type| source ---|---|--- 2026-04-08 23:26:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizgxwgcb32s 2026-04-09 01:28:04+00:00| published-proof-of-concept| Telegram/ppPYRB7DfIS8K7XD1dDGxWPkeD0WXLmtAHjzWOZBPf3GFDk 2026-04-09 06:00:21+00:00| seen|...
CVE-2026-3199
A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data involving task management that allows authenticated users with task creation permissions to execute arbitrary code by injecting malicious properties into a serialized object. A user can bypass...
CVE-2026-3199
A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control...
CVE-2026-3199
CVE-2026-3199 is an authenticated remote code execution flaw in Sonatype Nexus Repository’s task management component, affecting versions 3.22.1 through 3.90.2. An attacker with task creation permissions can bypass nexus.scripts.allowCreation and execute arbitrary code. The connected CVE records ...
CVE-2026-3199 Nexus Repository 3 - Authenticated Remote Code Execution via Task Property Injection
A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control...
CVE-2026-35479
creationtimestamp| type| source ---|---|--- 2026-04-08 22:11:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizcrhd7sc2z...
CVE-2026-35446
creationtimestamp| type| source ---|---|--- 2026-04-08 21:33:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizanh3xag2i 2026-04-09 01:26:43+00:00| published-proof-of-concept| Telegram/LyxiOFuM6k6JRrVhGkcWrU8R1Vj8dluNTy4xGDA54CBUTMw 2026-04-09 07:06:03+00:00| seen|...
CVE-2026-32586
creationtimestamp| type| source ---|---|--- 2026-04-08 20:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miz53zmpwx2u...
CVE-2026-40088
creationtimestamp| type| source ---|---|--- 2026-04-08 20:29:05+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2763-cj5r-c79m 2026-04-09 20:52:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3osk6xzy22 2026-04-09...
CVE-2026-5847
creationtimestamp| type| source ---|---|--- 2026-04-08 20:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5847...