558 matches found
EUVD-2026-117123
A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function getmlxresponse of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in improper input validation. The attack can be launched remotely...
CVE-2026-122015
A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function getmlxresponse of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in improper input validation. The attack can be launched remotely...
CVE-2026-122014
A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function loadsftmodel of the file npcpy/ft/sft.py. The manipulation of the argument basemodelnameorpath leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2026-122015
A vulnerability exists in NPC-Worldwide npcpy versions up to 2.1.27 within the MLX Provider component. The issue is located in the get_mlx_response function of the npcpy/gen/response.py file, where manipulation of the model argument leads to improper input validation (CWE-20). This vulnerability ...
CVE-2026-122015 NPC-Worldwide npcpy MLX Provider response.py get_mlx_response input validation
A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function getmlxresponse of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in improper input validation. The attack can be launched remotely...
CVE-2026-122015 NPC-Worldwide npcpy MLX Provider response.py get_mlx_response input validation
A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function getmlxresponse of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in improper input validation. The attack can be launched remotely...
CVE-2026-122014 NPC-Worldwide npcpy sft.py load_sft_model code injection
A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function loadsftmodel of the file npcpy/ft/sft.py. The manipulation of the argument basemodelnameorpath leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2026-122014
A code injection vulnerability exists in NPC-Worldwide npcpy versions up to 2.1.27 . The flaw is located in the load_sft_model function within the npcpy/ft/sft.py file, where manipulating the base_model_name_or_path argument allows for remote execution. The exploit has been disclosed to the publi...
CVE-2026-122014 NPC-Worldwide npcpy sft.py load_sft_model code injection
A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function loadsftmodel of the file npcpy/ft/sft.py. The manipulation of the argument basemodelnameorpath leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
EUVD-2026-117114
A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function loadsftmodel of the file npcpy/ft/sft.py. The manipulation of the argument basemodelnameorpath leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2026-122014 NPC-Worldwide npcpy sft.py load_sft_model code injection
A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function loadsftmodel of the file npcpy/ft/sft.py. The manipulation of the argument basemodelnameorpath leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
NPC Worldwide npcpy input validation error vulnerability
NPC Worldwide npcpy versions 2.1.27 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the basemodelnameorpath parameter in the loadsftmodel function within the file npcpy/ft/sft.py, potentially enabling remote code injection...
NPC Worldwide npcpy input validation error vulnerability
NPC Worldwide npcpy versions 2.1.27 and earlier contain an input validation error vulnerability. This vulnerability stems from improper handling of the ‘model’ parameter in the getmlxresponse function within the file npcpy/gen/response.py in the MLX Provider component, resulting in insufficient...
PT-2026-137175
A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get mlx response of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in improper input validation. The attack can be launched remotely...
PT-2026-137148
Name of the Vulnerable Software and Affected Versions NPC-Worldwide npcpy versions prior to 2.1.28 Description A remote code injection issue exists in the load sft model function within the npcpy/ft/sft.py file. This occurs when the base model name or path argument is manipulated, allowing an...
Malicious code in havas-worldwide (npm)
--- Credit: OpenSSF source...
A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide
For nearly two years, researcher Vangelis Stykas has maintained access to North Korean hackers’ servers. His work shows they pulled off intrusions in a shocking number of systems across the globe...
Claude Fable 5 and Mythos 5 “abruptly disabled” after US gov. ban
Anthropic has been ordered by the US government to cut off its newest Claude Fable 5 and Mythos 5 models for fear of abuse by adversaries. Reuters reports that Anthropic said it will "abruptly disable" its most advanced AI models for all users after the US government ordered it to suspend access...
CVE-2026-34899
Missing Authorization vulnerability in Eniture technology LTL Freight Quotes – Worldwide Express Edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – Worldwide Express Edition: from n/a through 5.2.1...
Cybersecurity AI (CAI) Dataset
We present CAI Dataset, a fourteen-month corpus of cybersecurity LLM trajectories collected through the open-source CAI agent framework, built in response to PentestGPT's finding that expert operator trajectories, not base-model capability, are the bottleneck for cybersecurity LLM performance. CA...