viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...

viproy-voipkit

Descontinuado Viproy era una herramienta PoC de evaluación de seguridad VoIP que tenía varios módulos y exploits que mantener. Sin embargo, fue desarrollada como un conjunto de módulos para Metasploit Framework. Dado que Metasploit Framework ha tenido actualizaciones significativas, los módulos...

a2 (>=0.4.9, <=0.8.3), abnativ (>=1.1.0, <=1.2.9) +262 more potentially affected by CVE-2026-96804 via mlflow-skinny (>=2.1.1, <=3.14.0)

mlflow-skinny PYPI version =2.1.1, =0.4.9, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =1.12.1 - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge 1.3.14 and more Source cves: CVE-2026-96804 Source advisory:...

abnativ (>=1.1.0, <=1.2.9), ai-24sea (>=0.1.0, <=1.1.0) +234 more potentially affected by CVE-2026-96775 via mlflow-skinny (>=2.18.0rc0, <=3.13.0rc0)

mlflow-skinny PYPI version =2.18.0rc0, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =0.1.9, =0.1.40 and more Source cves: CVE-2026-96775 Source advisory: MEND:CVE-2026-96775...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +87 more potentially affected by CVE-2026-8147 via mlflow-skinny (>=3.0.0rc0, <=3.12.0)

mlflow-skinny PYPI version =3.0.0rc0, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.0b1, =1.0.0b1, =1.0.17.1, =1.23.0, =0.1.0, =0.3.0, =0.7.0 and more Source cves: CVE-2026-8147 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-17796108...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +87 more potentially affected by CVE-2026-13484 via mlflow-skinny (>=3.0.0rc0, <=3.13.0)

mlflow-skinny PYPI version =3.0.0rc0, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.0b1, =1.0.0b1, =1.0.17.1, =1.23.0, =0.1.0, =0.3.0, =0.7.0 and more Source cves: CVE-2026-13484 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-17810764...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the apikey field in gateway secrets, which accepts environment variable references that are resolved against server-side credentials. An attacker can obtain sensitive environment...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +81 more potentially affected by CVE-2026-4035 via mlflow-skinny (>=3.0.0rc0, <=3.11.0rc0)

mlflow-skinny PYPI version =3.0.0rc0, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.0b1, =1.0.0b1, =1.0.17.1, =1.23.0, =0.1.0, =0.1.0, =0.1.0, =0.2.7 and more Source cves: CVE-2026-4035 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-17135850...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the /mlflow-artifacts/mpu/ endpoints in --serve-artifacts mode. An attacker can gain unauthorized access to and overwrite artifacts belonging to other users by manipulating artifactpath and pathfilename argument...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +67 more potentially affected by CVE-2026-2651 via mlflow-skinny (>=3.0.0rc0, <=3.10.0rc0)

mlflow-skinny PYPI version =3.0.0rc0, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.0b1, =1.0.0b1, =1.0.17.1, =1.23.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1rc1, =2.5.0, =2.45.0 and more Source cves: CVE-2026-2651 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-16874026...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass via the SearchModelVersions REST API endpoint and the mlflowSearchModelVersions GraphQL query. An attacker can access sensitive information, including model names, version descriptions, source URIs, tags, and other...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +67 more potentially affected by CVE-2026-2734 via mlflow-skinny (>=3.0.0rc0, <=3.10.0rc0)

mlflow-skinny PYPI version =3.0.0rc0, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.0b1, =1.0.0b1, =1.0.17.1, =1.23.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1rc1, =2.5.0, =2.45.0 and more Source cves: CVE-2026-2734 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-16787325...

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error in the /ajax-api endpoints. An attacker can gain unauthorized access to the Assistant's configuration and execute arbitrary commands by sending crafted cross-origin requests from a malicious webpage. Remediation...

ai-24sea (1.1.0), amzn-nova-customization-sdk (1.3.14) +21 more potentially affected by CVE-2026-2611 via mlflow-skinny (>=3.9.0, <=3.11.0rc0)

mlflow-skinny PYPI version =3.9.0, =1.62.0, =0.7.0, =7.1.1, =0.2.0, =3.9.0, =3.9.0, =1.0.1, =1.0.1, =3.0.15, =0.0.4, =1.0.0, =1.0.7 and more Source cves: CVE-2026-2611 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-16758001...

Creation of Temporary File With Insecure Permissions

Overview Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions via the getorcreatenfstmpdir and createmodeldownloadingtmpdir functions. An attacker can modify model artifacts by exploiting these permissions, potentially leading to arbitrary code...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +81 more potentially affected by CVE-2025-10279 +1 more via mlflow-skinny (>=3.0.0rc0, <=3.11.0rc0)

mlflow-skinny PYPI version =3.0.0rc0, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.0b1, =1.0.0b1, =1.0.17.1, =1.23.0, =0.1.0, =0.1.0, =0.1.0, =0.2.7 and more Source cves: CVE-2025-10279, CVE-2026-4137 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-16756597...

Authentication Bypass by Primary Weakness

Overview Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness via the findfastapivalidator function. An attacker can gain unauthorized access to sensitive API endpoints by sending requests to non-/gateway/ paths when the server is started with authenticati...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +67 more potentially affected by CVE-2026-2652 via mlflow-skinny (>=3.0.0rc0, <=3.10.0rc0)

mlflow-skinny PYPI version =3.0.0rc0, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.0b1, =1.0.0b1, =1.0.17.1, =1.23.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1rc1, =2.5.0, =2.45.0 and more Source cves: CVE-2026-2652 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-16698136...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +67 more potentially affected by CVE-2026-2614 via mlflow-skinny (>=3.0.0rc0, <=3.10.0rc0)

mlflow-skinny PYPI version =3.0.0rc0, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.0b1, =1.0.0b1, =1.0.17.1, =1.23.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1rc1, =2.5.0, =2.45.0 and more Source cves: CVE-2026-2614 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-16643511...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +67 more potentially affected by CVE-2026-2393 via mlflow-skinny (>=3.0.0rc0, <=3.10.0rc0)

mlflow-skinny PYPI version =3.0.0rc0, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.0b1, =1.0.0b1, =1.0.17.1, =1.23.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1rc1, =2.5.0, =2.45.0 and more Source cves: CVE-2026-2393 Source advisory: SNYK:PYTHON-MLFLOWSKINNY-16642072...