Posts of last 24 hours

CVE-2026-15033 | christopherthielen check-peer-dependencies up to 4.3.4 peerDependencies dist/packageUtils.js shelljs.exec os command injection (Issue 74)
A vulnerability, which was classified as critical, has been found in christopherthielen check-peer-dependencies up to 4.3.4. Affected by this vulnerability is the function shelljs.exec of the file dist/packageUtils.js of the component peerDependencies. This manipulation causes os command injection. This vulnerability appears as CVE-2026-15033. The attack may be initiated remotely. There is no available exploit. The project was informed of the problem early through an issue report but has not responded yet.
https://vuldb.com/vuln/376784
Submit #850895: Bentoml OpenLLM 0.6.30 Command Injection [Accepted]
Submit #850895 / VDB-376786
https://vuldb.com/submit/850895
Submit #850880: flask-dashboard Flask-MonitoringDashboard v5.0.2 CSRF [Duplicate]
Submit #850880 / VDB-376785
https://vuldb.com/submit/850880
Submit #850879: flask-dashboard Flask-MonitoringDashboard v5.0.2 CSRF [Duplicate]
Submit #850879 / VDB-376785
https://vuldb.com/submit/850879
Это не заменит вашу RTX, но впечатляет: кластер из 8192 чипов RISC-V выводит графику уровня QVGA
Домашний эксперимент, который бросает вызов здравому смыслу.
https://www.securitylab.ru/news/574568.php
Submit #850878: flask-dashboard Flask-MonitoringDashboard v5.0.2 CSRF [Duplicate]
Submit #850878 / VDB-376785
https://vuldb.com/submit/850878
在美国政府批准后，GPT-5.6系列模型将在明天向全球用户开放使用
https://buaq.net/go-427679.html
Submit #850877: flask-dashboard Flask-MonitoringDashboard v5.0.2 CSRF [Accepted]
Submit #850877 / VDB-376785
https://vuldb.com/submit/850877
Submit #850875: Node.js check-peer-dependencies 4.3.4 OS Command Injection [Accepted]
Submit #850875 / VDB-376784
https://vuldb.com/submit/850875
Meta眼镜更新 破坏隐私指示灯即关闭摄像头
在公众对Meta智能眼镜的强烈反对声中，该公司宣布将为其眼镜更新一项新功能，当检测到有人篡改或毁坏智能眼镜的隐私LED灯时，该功能将禁用摄像头。该更新旨在应对那些采取诸如物理钻孔破坏LED灯等行为的改
https://buaq.net/go-427672.html

Managed ad