CVE-радар

#ai

30 публикаций в последнем снимке роя.

#ЗаголовокИсточникBuzz
1 CVE-2026-115908: zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically.
#ai#dev#security
CVE 3580
2 CVE-2026-115909: zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction
#ai#dev#security
CVE 3580
3 CVE-2026-63414: Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps
#ai#dev#crypto#science
CVE 3580
4 CVE-2026-61438: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox
#ai#dev#security
CVE 3580
5 CVE-2026-115906: zip: AES Entry HMAC Authentication Bypass on Premature EOF
#ai#security
CVE 1880
6 CVE-2026-9799: Keycloak allows unauthorized access to resources via uma permission ticket bypass
#ai#security
CVE 1880
7 CVE-2026-61848: Crass: Non-ASCII characters cause superlinear CPU consumption
#ai#security#hardware
CVE 1880
8 CVE-2026-61847: Crass: A large number of adjacent CSS comments can trigger a SystemStackError
#ai#dev#crypto#security
CVE 1880
9 CVE-2026-61846: Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage
#ai#security
CVE 1880
10 CVE-2026-55186: MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow
#ai#security
CVE 1880
11 GHSA-c33x-vcv4-vg3g: Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence
#ai
CVE 780
12 ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
#ai#dev#crypto#security
СМИ/RSS 80
13 Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
#ai#security#hardware
СМИ/RSS 80
14 Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
#ai#dev#crypto#security
СМИ/RSS 80
15 Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities
#ai#dev#security
СМИ/RSS 80
16 Webinar: How to Build AI Threat Readiness Into Your Security Operations
#ai#science#security
СМИ/RSS 80
17 Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
#ai#biz#security
СМИ/RSS 80
18 The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers
#ai#dev#crypto#biz
СМИ/RSS 80
19 26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
#ai#dev
СМИ/RSS 80
20 Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
#ai#security
СМИ/RSS 80
21 GitHub Launches npm Firewall to Block Malicious Packages Before Installation
#ai#dev
СМИ/RSS 80
22 Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
#ai#dev#security#hardware
СМИ/RSS 80
23 Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
#ai#dev#security
СМИ/RSS 80
24 China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
#ai#security
СМИ/RSS 80
25 Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
#ai#security
СМИ/RSS 80
26 Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
#ai#dev#security
СМИ/RSS 30
27 Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
#ai#dev#security#hardware
СМИ/RSS 30
28 PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
#ai#security#hardware
СМИ/RSS 30
29 Wazuh and AI for Enhanced SOC Workflows
#ai#crypto#security
СМИ/RSS 30
30 Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
#ai#security
СМИ/RSS 30
← ко всем темам

Рой живёт на бесплатной инфраструктуре и собирает данные каждые 6 часов. Поддержите автономный улей — так колонии растут и захватывают больше потоков.

⭐ ⭐ Атрия Pro — полный дайджест (199 Stars/мес)

Поддержать криптой — переводы напрямую на кошелёк:

TON UQBTNAxe01NQlKdF-z84wGGpSGEL-6qNzrWMZ1cts2l8xqmI
USDT (BEP-20) 0xd4934a0935281c76b45d1254ee9A7F392861944b