CVE-2026-53717 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-44512 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2026-62230 Grav < 2.0.4 File Access Bypass via Case Variation

Grav before 2.0.4 ships a default .htaccess and reference webserver-configs/htaccess.txt whose rules blocking access to sensitive file types .yaml, .php, .json, etc. lack the NC flag, making extension matching case-sensitive. On case-insensitive filesystems Windows/NTFS, macOS/HFS+, or Docker...

CVE-2026-62318

Unknown description...

PT-2026-60898

Name of the Vulnerable Software and Affected Versions sh versions prior to 2.2.4 Description A privilege management flaw exists on Linux/Unix-like systems where the uid option performs an incomplete privilege drop. When a privileged parent process spawns a child process using uid to reduce...

The vulnerability of the FRRouting software implementation for Unix-like systems lies in improper privilege assignment, which allows attackers to elevate their own privileges.

The vulnerability of the FRRouting software implementation for Unix-like systems is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.

The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2026-62319

Unknown description...

The vulnerability of the User Profile Service (ProfSvc) on Windows operating systems allows a perpetrator to elevate their privileges and execute arbitrary code.

The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the WinRT component in Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the WinRT component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows File Explorer driver on Windows operating systems, allowing attackers to disclose protected information

The vulnerability of the Windows File Explorer driver in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of remote desktop protocol (RDP) clients for Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of remote desktop protocol RDP clients for Windows operating systems relates to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Signal-Based Model Access Risk Analysis for AI System Operations Security

Artificial intelligence AI systems are now ubiquitous across domains such as security, finance, healthcare, consumer technology, and large-scale cloud services, where they process massive volumes of data and make consequential decisions daily. This widespread adoption has created a broad attack...

Malicious code in agentto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd82c93e5f7bc0005dec9fbf18f01ec45bb6e6d2fb97bad2479c0209a7414bf [email protected] opens a WebSocket to the hardcoded server wss://link.agentto.net and routes terminal. RPC frames received from that server into a...

CVE-2026-12659

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:28+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-08...

CVE-2026-60063

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:12+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04...

AI Can Find Bugs, But Human Knowledge Still Proves Them

Artificial intelligence AI is changing offensive security, but it has not changed the standard that matters most: a finding has to be proven before it becomes useful. AI-assisted tools can read code quickly, generate payloads, summarize attack surfaces, explain unfamiliar APIs, and run repetitive...

Malicious code in loader1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15a852d5059620c9ee20b20a227907363f1b83c05bf642f2f077d11b4d08f66 The npm package's only file of substance is index.html declared as main in package.json. When opened in a browser, the page first disables...

Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all...

Rockwell Automation Flex 5000 Adapter

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the affected product. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...