CVE-2026-47407 PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the Platform server exposes resources under /api/v1/workspaces/workspaceid/... and protects them with a requireworkspacememberworkspaceid FastAPI dependency. The dependency only checks tha...

Calling all breakers & builders: BlueHat Seattle registration is open!

Exciting changes are coming to BlueHat Seattle 2019! If you’d like to attend this premier security conference, we have good news for you: registration for BlueHat Seattle is now open and we hope you register. Wait, isn't BlueHat invitation-only? It is…but if we haven’t sent you an invitation, we...

concrete5 'system/registration/open.php' Arbitrary PHP Code Execution Vulnerability

concrete5 is a free content management system. An arbitrary PHP code execution vulnerability exists in concrete5. An attacker can exploit this vulnerability to execute arbitrary PHP code in the context of a web server process...

International Conference on Cyber Security (ICCS) 2012 : Protecting the Cyber World

International Conference on Cyber Security ICCS 2012 : Protecting the Cyber World The FBI is teaming up with Fordham University for the International Conference on Cyber Security. It's an effort to identify emerging cyber threats and develop ways to mitigate those threats. The ZeuS Trojan has...