13774 matches found
PT-2026-87593
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
MAL-2026-16199 Malicious code in plogme (npm)
plogme is a renamed fork of the Baileys WhatsApp Web library from the same publisher-controlled family as @crysnovax/baileys MAL-2026-15917, and versions 1.0.0 through 1.0.3 carry the same forced-follow and fingerprint modules. lib/Utils/channel-policy.js javascript-obfuscator output, identical t...
PT-2026-87807
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
PT-2026-88159
Incorrect Authorization CWE-863 in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user could invoke machine learning functionality beyond their authorization scope,...
PT-2026-87874
Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description Remote Code Execution in the Windows Routing and Remote Access Service RRAS allows a remote attacker to execute arbitrary code, enabling unauthorized...
Toward greater transparency: Expanding machine-readable Vulnerability Exploitability eXchange (VEX)
Starting today, Microsoft is publishing Vulnerability Exploitability eXchange VEX statements for all Microsoft-assigned CVEs. Building on our work with theCommon Security Advisory Framework CSAFand our previousAzure Linux VEX implementation, this latest milestone in the Microsoft Security Respons...
PT-2026-89742
Name of the Vulnerable Software and Affected Versions strongSwan versions 5.9.7 through 6.0.7 Description The libcharon component mishandles the behavioral workflow within the IKEv2 state machine. This improper handling of CREATE CHILD SA requests can lead to an authentication bypass...
MAL-2026-15968 Malicious code in anime-vostfr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f624a7b8a2be52c79af7942acc5717ff29fa17cec42dce635c26839deb8e06af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GO-2026-4384 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-14525 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-25MH-HP8X-CGRV vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
Security Bulletin: Watson Machine Learning on Cloud Pak for Data is affected by net/url (Publicly disclosed vulnerability) ( CVE-2025-47912)
Summary Watson Machine Learning on Cloud Pak for Data is affected by CVE-2025-47912 Vulnerability Details CVEID:CVE-2025-47912 DESCRIPTION: The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6...
Security Bulletin: Watson Machine Learning on Cloud Pak for Data is affected by transformers(Publicly disclosed vulnerability) ( CVE-2024-11393, CVE-2024-11394, CVE-2024-11392, CVE-2024-12720, CVE-2024-3568)
Summary Watson Machine Learning on Cloud Pak for Data is affected by CVE-2024-11393, CVE-2024-11394, CVE-2024-11392, CVE-2024-12720, CVE-2024-3568 Vulnerability Details CVEID:CVE-2024-11393 DESCRIPTION: Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code...
Malicious code in @crysnovax/baileys (npm)
@crysnovax/baileys is a renamed fork of the Baileys WhatsApp Web library. On every successful connection connection.update with connection === 'open', wired in lib/Socket/socket.js it silently makes the user's own authenticated WhatsApp account follow two channels controlled by the publisher,...
BIT-ELASTICSEARCH-2026-72649 Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution
Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...
Data-Optimized Contingency Screening: A Machine Learning Approach to Power System Security
Ensuring the security of the power system is essential for stability and reliability, especially in the event of disruption. Effective classification of contingency in power systems enables proactive decision-making and mitigates large-scale breakdowns and failures. This study explores the use of...
CVE-2026-82293
Incorrect Authorization CWE-863 in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user could invoke machine learning functionality beyond their authorization scope,...
CVE-2026-78598
Incorrect Authorization CWE-863 in the Kibana machine learning feature can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding machine learning job management privileges within a single Kibana space could cau...
CVE-2026-82293 Incorrect Authorization in Kibana Leading to Unauthorized Resource Consumption
Incorrect Authorization CWE-863 in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user could invoke machine learning functionality beyond their authorization scope,...
CVE-2026-82293 Incorrect Authorization in Kibana Leading to Unauthorized Resource Consumption
Incorrect Authorization CWE-863 in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user could invoke machine learning functionality beyond their authorization scope,...