13284 matches found
CVE-2026-14703
creationtimestamp| type| source ---|---|--- 2026-07-05 05:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116865605611564132 2026-07-05 05:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpus6ntnj72a 2026-07-05 10:04:14+00:00| seen|...
CVE-2026-14691
creationtimestamp| type| source ---|---|--- 2026-07-05 02:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116864897921651205 2026-07-05 02:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpui4szdd22o 2026-07-05 09:58:11+00:00| seen|...
CVE-2025-71373
creationtimestamp| type| source ---|---|--- 2026-07-04 05:28:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpsdc2tpwf2x 2026-07-04 06:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpsf3ot6nx2f...
CVE-2025-71372
creationtimestamp| type| source ---|---|--- 2026-07-04 05:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpsbwlkaf723 2026-07-04 06:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpsf3ib2b22u...
CVE-2025-71362
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources...
EUVD-2025-210418
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources...
CVE-2025-71362 picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources...
CVE-2025-71362 picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources...
Securing Deep Learning Hardware: A Survey of Side-Channel Vulnerabilities and Countermeasures
As deep learning models are increasingly deployed in critical sectors such as healthcare, finance, and security, ensuring their protection against emerging threats has become crucial. Among these threats, side-channel attacks SCAs represent a particular challenge since they can extract sensitive...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...
CVE-2026-58426
creationtimestamp| type| source ---|---|--- 2026-07-03 22:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprl4pas652r 2026-07-04 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116858764503193267 2026-07-04 00:01:05+00:00| seen|...
CVE-2026-27771
Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...
cvss-exploit-evaluator
CVSS & Exploit Evaluator A professional Claude Skill...
CVE-2026-28740 Gitea LFS object reuse bypasses Code-unit authorization
Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access...
CVE-2026-27771
Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...
CVE-2026-27771
CVE-2026-27771 affects Gitea container registry prior to 1.26.2. The root cause is ReqContainerAccess not enforcing per-owner visibility, allowing ghost users (UserID: -1) to access private container images via standard OCI/Docker endpoints. Impact: unauthenticated access can expose private/inter...
CVE-2026-27771 Gitea Composer package source links use insufficient permission checks
Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...
CVE-2026-27771 Gitea Composer package source links use insufficient permission checks
Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...