40122 matches found
CVE-2026-82072
Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
stitchnet (>=0.2.0, <=0.2.2), trt-engine-explorer (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-79720 via netron (7.9.9)
netron PYPI version 7.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - stitchnet =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...
stitchnet (>=0.2.0, <=0.2.2), trt-engine-explorer (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-79718 via netron (7.9.9)
netron PYPI version 7.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - stitchnet =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-79718 Source advisory: OSV:PYSEC-2026-4001...
stitchnet (>=0.2.0, <=0.2.2), trt-engine-explorer (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-79719 via netron (7.9.9)
netron PYPI version 7.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - stitchnet =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-79719 Source advisory: OSV:PYSEC-2026-4002...
Improper Neutralization of Special Elements Used in a Template Engine
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the email template field. An attacker can execute arbitrary code on the server by submitting a specially crafted payload. Remediation Upgrade...
finn-plus (1.2.0), finn-plus-notebooks (>=1.3.0, <=1.4.0) +4 more potentially affected by CVE-2026-79718 via netron (>=7.9.9, <=8.9.9)
netron PYPI version =7.9.9, =1.3.0, =0.0.0, =0.1.2, =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-79718 Source advisory: MEND:CVE-2026-79718...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the release callbacks and error cleanup mechanisms for the wq, engine, and group structures call kfree, resulting in double releases. This can lead to memory corruption...
From Concept to Context Engine: How Wiz Built AI-Powered Data Discovery
Inside the multi-agent pipeline and feedback loops that turned a bucket scanner into a context engine...
WordPress AI Engine plugin 3.3.3-3.7.2 - 3.7.1 - Subscriber+ Arbitrary File Read vulnerability
WordPress AI Engine plugin 3.3.3-3.7.2 - 3.7.1 - Subscriber+ Arbitrary File Read vulnerability discovered by Jashid Sany in WordPress Plugin AI Engine versions 3.3.3-3.7.1...
CVE-2018-16373
creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:11+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-28 00:00:55+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-29 00:00:15+00:00| published-proof-of-concept|...
CVE-2026-81277
Contributor SQL Injection in Suggestion Engine for WooCommerce = 2.0.11 versions...
CVE-2026-81277
Contributor-level SQL Injection vulnerability affects the Suggestion Engine for WooCommerce WordPress plugin in versions
CVE-2026-81277 WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability
Contributor SQL Injection in Suggestion Engine for WooCommerce = 2.0.11 versions...
CVE-2026-81277 WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability
Contributor SQL Injection in Suggestion Engine for WooCommerce = 2.0.11 versions...
EUVD-2026-66954
Contributor SQL Injection in Suggestion Engine for WooCommerce = 2.0.11 versions...
WordPress AI Engine plugin < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription vulnerability
Subscriber+ Arbitrary File Read via Audio Transcription vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin AI Engine versions 3.6.6...
WordPress AI Engine plugin < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens vulnerability
Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin AI Engine versions 3.6.4...
WordPress AI Engine plugin < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie vulnerability
Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin AI Engine versions 3.6.4...
MAL-2026-14553 Malicious code in @cortana-md/engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d849c8409247f2e6aa75683bf87afacaf8db81daded8235a622e952c94ccbb7f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malware in @cortana-md/engine
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...