#could


LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

Sep 15, 2026 // 11:31

A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-hosting server, cPanel warned in an […]

Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets

Sep 9, 2026 // 13:49

Bitcoin wallet company Alby has warned of a critical flaw in Alby Hub that could have let an attacker take over a wallet and send […]

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

Aug 28, 2026 // 14:30

ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 on the CVSS scoring system and exploitable, […]

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

Aug 28, 2026 // 12:50

cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code […]

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

Aug 26, 2026 // 15:00

The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura’s HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary […]

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

Aug 25, 2026 // 17:43

Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama instance serving an […]

Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

Aug 25, 2026 // 15:48

Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol (MCP) command in […]

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

Aug 24, 2026 // 15:03

Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could […]

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data

Aug 20, 2026 // 17:37

Adversa AI has disclosed an attack technique that it says can cause xAI’s Grok chatbot to send a user’s name, approximate location, subscription tier, and […]

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

Aug 20, 2026 // 14:14

Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL’s open-source AMMOS Instrument Toolkit, that allow an […]

Previous 1 2 3 4 … 14 Next