13356 matches found
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys. A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, Open WebUI, Langflow, and Gradio: the image generators, local model runners, an...
GHSA-8WR5-JM2H-8R4F vLLM has Remote DoS via Invalid Recovered Token Reinjection
Summary A frontend-legal multi-request speculative workload can make vLLM produce an out-of-vocabulary recovered token equal to vocabsize, convert that value to -1 when choosing the next live token for a request, and then feed that -1 back into the next drafter input ids. On Qwen3 GPTQ this reach...
EUVD-2026-18522
vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models...
MINI-754W-QH2M-3FRF
Bulletin has no description...
MINI-R88R-7M75-P2J9
Bulletin has no description...
MINI-3225-G9HP-39WM
Bulletin has no description...
MINI-477R-2XJ4-92WH
Bulletin has no description...
MINI-VM5C-P9Q4-5M8R
Bulletin has no description...
MINI-W79R-M6CC-JJ59
Bulletin has no description...
CVE-2026-41842
A flaw was found in the Spring Framework. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exploiting how Spring MVC and WebFlux applications resolve static resources. This can lead to the affected application becoming unavailable. Mitigation Mitigation for this iss...
CVE-2026-15380
A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...
EUVD-2026-45153
A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...
PT-2026-60850
Name of the Vulnerable Software and Affected Versions django-pyas2 versions prior to 1.2.4 Description An OS command injection flaw exists where the cmd receive and cmd send fields on the Partner model are passed directly to the os.system function in pyas2/utils.py without proper sanitization. Th...
PT-2026-60899
Name of the Vulnerable Software and Affected Versions PocketSphinx versions 5prealpha through 5.1.0 Description The trie language model code fails to check boundary conditions when reading headers of ARPA, DMP, and binary format language model files, which can lead to stack and heap buffer...
CVE-2026-44174
Kirby is an open-source content management system. Prior to 4.9.1 and 5.4.1, Kirby did not validate the model attributes that were used in its collection queries, allowing attackers to include arbitrary model methods in their queries. This includes methods with sensitive data such as password...
CVE-2026-44174
Kirby CMS (versions prior to 4.9.1 and 5.4.1) exposes REST API search and collection queries that did not validate model attributes, allowing authenticated users to invoke arbitrary model methods (e.g., password(), root(), loginPasswordless(), delete()) via collection endpoints. This can disclose...
EUVD-2026-44798
MCP Python SDK: WebSocket server transport does not support Host/Origin validation...
Missing Origin Validation in WebSockets
Overview mcp is a Model Context Protocol SDK Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets in the deprecated websocketserver transport function, which builds a Starlette WebSocket and calls acceptsubprotocol='mcp' without inspecting the connection's...