1659 matches found
PT-2026-69968
Name of the Vulnerable Software and Affected Versions RHOAI training-operator affected versions not specified Description A flaw allows users with standard edit or admin roles in any Kubernetes namespace to escalate privileges. By creating training jobs, an attacker can impersonate service...
CVE-2026-65541
Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...
EUVD-2026-53971
Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...
CVE-2026-65541
Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...
CVE-2026-65541 WordPress Staff Training plugin <= 1.0.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...
CVE-2026-65541
The CVE concerns WordPress Plugin “Staff Training” versions
Exploit for CVE-2026-17583
cve-id Donate Support the maintenance of this project wit...
EUVD-2026-51652
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard.pkl file via...
CVE-2026-68771
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard.pkl file via...
CVE-2026-68771 ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard.pkl file via...
PT-2026-66867
Name of the Vulnerable Software and Affected Versions ComfyUI version 0.23.0 Description An unsafe deserialization issue exists in the LoadTrainingDataset node. Unauthenticated remote attackers can execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization...
vulnlab-platform-lab
Local VulnLab Platform The Local VulnLab Platform is a vulner...
CVE-2026-63242
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records...
CVE-2026-63242 Business logic vulnerability
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records...
EUVD-2026-50137
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records...
CVE-2026-63242
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records...
CVE-2026-63242
Koollab LMS is affected by a business logic vulnerability that lets an authenticated learner set their lesson completion to completed via the SCORM commit endpoint without viewing the material. This affects training/completion records and is rated CVSS v3.1 base score 4.3 (Medium) with PR:L, UI:N...
PT-2026-65713
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records...