SECUREVENT: Hybrid AI/ML Security Monitoring for Distributed Event-Based Systems

Distributed event-based systems have become a common substrate for Internet-scale publish/subscribe services, IoT telemetry, cloud-native microservices, and security operations pipelines. Their loose coupling and asynchronous delivery improve scalability, but they also expand the attack surface:...

CVE-2026-37225

FlexRIC v2.0.0 crashes when the iApp receives an E42RICSUBSCRIPTIONREQUEST with an empty ricEventTriggerDefinition field. The E42 layer decoder accepts this as valid, but the E2AP encoder asserts a non-empty constraint when forwarding the request. A remote unauthenticated attacker can crash the...

Apache Airflow 安全漏洞

Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. Versions of Apache Airflow prior to 3.2.2 contained security vulnerabilities. These vulnerabilities stemmed from a lack of checks...

Malicious Package

Overview @cloudplatform-single-spa/event-bus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

CVE-2026-10188

creationtimestamp| type| source ---|---|--- 2026-05-31 17:49:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn64twk4vy2g 2026-06-01 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116674030951449755 2026-06-01 09:00:30+00:00| seen|...

CVE-2026-31525

creationtimestamp| type| source ---|---|--- 2026-05-31 15:22:30+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mn5umqjwmq25 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601 2026-06-02 09:00:04+00:00|...

CVE-2026-42358

creationtimestamp| type| source ---|---|--- 2026-05-31 13:32:31+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5oi3cac32a...

CVE-2026-45426

creationtimestamp| type| source ---|---|--- 2026-05-31 13:18:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5nogdzso26...

CVE-2026-40961

creationtimestamp| type| source ---|---|--- 2026-05-31 12:33:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5l6rw67u23...

CVE-2026-10166

creationtimestamp| type| source ---|---|--- 2026-05-31 05:28:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn4tfvuvxl26...

CVE-2026-49361

creationtimestamp| type| source ---|---|--- 2026-05-30 17:42:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn3lyg4rz32y...

CVE-2018-25426

creationtimestamp| type| source ---|---|--- 2026-05-30 17:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3jtu7lya2q...

CVE-2014-3508

creationtimestamp| type| source ---|---|--- 2026-05-30 16:29:34+00:00| seen| https://gist.github.com/xadenryan/c9b467b0ab31ac5f421303705973d5d8...

CVE-2026-7459

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated Subscriber+ account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoints reacttoevent / unreacttoevent. The endpoints register getitemspermissionschec...

CVE-2026-7459 Simple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated Subscriber+ account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoints reacttoevent / unreacttoevent. The endpoints register getitemspermissionschec...

CVE-2026-7459

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated Subscriber+ account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoints reacttoevent / unreacttoevent. The endpoints register getitemspermissionschec...

CVE-2026-7459

The CVE concerns the Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress (

EUVD-2026-33455

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated Subscriber+ account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoints reacttoevent / unreacttoevent. The endpoints register getitemspermissionschec...

CVE-2026-7459 Simple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated Subscriber+ account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoints reacttoevent / unreacttoevent. The endpoints register getitemspermissionschec...

PT-2026-45088

Name of the Vulnerable Software and Affected Versions Simple History versions prior to 5.26.1 Description The Simple History plugin for WordPress allows authenticated users with Subscriber-level permissions or higher to take over accounts. The issue exists in the event reaction endpoints...