Unsafe Deserialization Vulnerability in Keras TorchModuleWrapper
CVE-2026-12484 is a critical unsafe deserialization flaw in Keras affecting TorchModuleWrapper.from_config, risking remote code execution.
Read digestSecurity Intel Feed
Cyber Hose
Page 83 of 93
Hackers abuse ViPNet update mechanism to target Russian government
Hackers exploit ViPNet software updates to deploy malware targeting Russian government and critical sectors.
In this digest
SonicWall SMA 1000 VPN Zero-Days Exploited Pre-Disclosure for Root
Two critical zero-day flaws in SonicWall SMA 1000 VPNs were exploited for root access before patches were released.
In this digest
CVE-2026-16226 in SourceCodester Pizzafy Ecommerce System
A moderate severity vulnerability in SourceCodester Pizzafy Ecommerce System's admin_class_novo.php requires attention.
In this digest
- CVE-2026-16226 in SourceCodester Pizzafy Ecommerce System
- Multiple SQL Injection Flaws in SourceCodester Class and Exam Timetabling System
- Linux Kernel Vulnerabilities Including iommu/vt-d and selinux Fixes
CVE-2026-16219 Path Traversal in Croogo CMS Admin File Manager
A path traversal vulnerability in Croogo CMS Admin File Manager's FileManager.php could allow unauthorized file access.
In this digest
CVE-2026-16215 in django-jet OAuth Credential Revoke Authorization
A security flaw in django-jet OAuth Credential Revoke authorization poses risks with CVSS 6.5 severity.
In this digest
CVE-2026-16206 in django-oauth-toolkit affects OAuth2 token validation
A moderate-severity flaw in django-oauth-toolkit's OAuth2 token validation could impact many applications using this popular framework.
In this digest
CVE-2026-16200 zevorn rt-claw RPC authorization vulnerability
A CVSS 7.3 authorization flaw in zevorn rt-claw RPC claw_tool_invoke could allow unauthorized actions.
Read digestChinese Civic Apps Share Vulnerable Reward Backend Allowing Forged
Multiple Chinese civic apps use a shared backend with a recoverable signing secret enabling forged reward and lottery claims.
In this digest
WordPress Core Pre-Auth RCE CVE-2026-63030 Affects Versions 6.9.0
A critical pre-auth remote code execution in WordPress Core affects versions 6.9.0 to 7.0.1 and is actively exploited.
Read digestAssess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check