invertedai-drive (0.1.0) potentially affected by CVE-2026-73626 via jupyterlab (3.4.4)

jupyterlab PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - invertedai-drive 0.1.0 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

MIT to Become Hotbed of AI Video Surveillance

It's a lot: According to information obtained by The Tech , MIT is spending over $3 million on more than 500 AI surveillance cameras in academic buildings, residence halls, and outdoor areas along Memorial Drive. Installation of the new cameras, along with the wiring and infrastructure that will...

ANT-2026-XBE9HJ4Y · moodle · Path-traversal

path-traversal high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ophion Security. ANT-2026-XBE9HJ4Y: Path Traversal → Arbitrary File Write → RCE ...

Redirected Drive Buffering System Windows Privilege Escalation

The vulnerability of the Redirected Drive Buffering System RDBS in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data

Impact The FiftyOne App/API server fiftyone/server/app.py and the /media route fiftyone/server/routes/media.py unconditionally set a permissive CORS header Access-Control-Allow-Origin: on their responses. Because the embedded App server runs locally and is unauthenticated, this allows any website...

MAL-2026-10643 Malicious code in ethereum-input-decorder (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94137fcf0aee7d8edb4e15a8bc9be4455fbdf79cb5bf99987b79f0393fdff62c The package name typosquats the legitimate 'ethereum-input-decoder'. Its top-level init.py unconditionally invokes a payload routine on import: it...

EUVD-2026-43850

Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally...

CVE-2026-50372

Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally...

CVE-2026-50372 Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability

...

CVE-2026-50372

CVE-2026-50372 — Windows Redirected Drive Buffering : A buffer over-read vulnerability in Windows Redirected Drive Buffering could allow an authorized, local attacker to elevate privileges. The CVE is corroborated by multiple sources (NVD, MSRC, EUVD/ENISA, CIRCL sighting) with an incident descri...

CVE-2026-50372 Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability

...

Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability

Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally...

CVE-2026-50372: Buffer Over-read

Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally...

PT-2026-58354

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A buffer over-read in Windows Redirected Drive Buffering enables an authorized attacker to elevate privileges locally, potentially allowing a low-privileged local account to obtain...

invertedai-drive (0.1.0) potentially affected by CVE-2026-42557 via jupyterlab (3.4.4)

jupyterlab PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - invertedai-drive 0.1.0 Source cves: CVE-2026-42557 Source advisory: OSV:PYSEC-2026-2537...

invertedai-drive (0.1.0) potentially affected by CVE-2026-40171 via jupyterlab (3.4.4)

jupyterlab PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - invertedai-drive 0.1.0 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

PYSEC-2026-2856 OpenViking contains a Path Traversal vulnerability

OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write files outside the intended import directory. Attackers can craft malicious ZIP archives with traversal sequences, absolute paths, or...

Exploit for CVE-2026-7275

CVE-2026-7275-moodle PoC & dokumentasi untuk CVE-2026-7275...

New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older destructive programs bolted into one, offered as commands the operator can choose from. Each is a different way to break a machine: wipe the whole disk,...

invertedai-drive (0.1.0) potentially affected by CVE-2025-59842 via jupyterlab (3.4.4)

jupyterlab PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - invertedai-drive 0.1.0 Source cves: CVE-2025-59842 Source advisory: OSV:PYSEC-2026-1482...