Latest CVE
NerdDual Nav
HomeChatbox
Headlines
| » | AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own configuration file and run an attacker's code on a dev... |
| » | Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities
Google's DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber, a specialized artificial intelligence (AI) model built atop 3.5 Flash... |
Date published: Tue, 21 Jul 2026 21:08:24 +0530
Details
| » | Choose Wisely: AI-Generated Coding Risk Varies, a Lot
AI-generated code introduces 15 vulnerabilities on average per codebase, but the actual risk depends on framework pairing more than the model used. |
| » | 'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of... |
Date published: not known
| » | MIT to Become Hotbed of AI Video Surveillance
|
| » | On Flock License Plate Tracking Cameras
|
Date published: not known
Details
| » | Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC A third SharePoint Serv... |
| » | Mozilla dicht kritieke Firefox-lekken een week later ook in ESR-versies
Mozilla dicht kritieke Firefox-lekken een week later ook in ESR-versies Mozilla heeft twee kritieke kwets... |
Date published: Tue, 21 Jul 2026 14:57:51 +0000
Details
| » | A Vulnerability Chain in WordPress Core Could Allow for Remote Code Execution
A vulnerability chain has been discovered in WordPress Core that could allow for remote code execution. WordPress is an open-source content managem... |
| » | Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful explo... |
Date published: not known
| » | CVE-2026-47396 - PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset
CVE ID :CVE-2026-47396 Published : July 21, 2026, 3:55 p.m. | 18 minutes ago Description :PraisonAI is a multi-agent teams system. Pri... |
| » | CVE-2026-47395 - PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context
CVE ID :CVE-2026-47395 Published : July 21, 2026, 3:52 p.m. | 21 minutes ago Description :PraisonAI is a multi-agent teams system. Pri... |
Date published: Tue, 21 Jul 2026 15:55:22 +0000
Details