Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.6 HIGH
CVE-2025-71351 — picklescan - Remote Code Execution via timeit.timeit() Detection Bypass

picklescan before 0.0.25 fails to detect malicious pickle files that use timeit.timeit() in the __reduce__ method, allowing remote code execution. Attackers can craft pickle files that import dangero…

picklescan | Remote | Injection
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
8.1 HIGH
CVE-2025-71348 — picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass

picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files embedding arbitrary…

picklescan | Remote | Supply Chain
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
4.3 MEDIUM
CVE-2026-12799 — BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users imp…

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_view_users of the file litellm/proxy/management_endpoints/internal_user_endpoints…

litellm | Remote | Authorization
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
6.5 MEDIUM
CVE-2026-12798 — BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_asy…

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function load_openapi_spec_async of the file litellm/proxy/_experimental/mcp_server/openapi_to_mc…

litellm | Remote | Server-Side Request Forgery
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
6.5 MEDIUM
CVE-2026-12797 — BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization

A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_hook of the file enterprise/enterprise_hooks/banned_keywords.py of the component Completio…

litellm | Remote | Authorization
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
6.5 MEDIUM
CVE-2026-12796 — BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid sessi…

A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpoints/ui_sso.py of the component S…

litellm | Remote | Authentication
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
7.5 HIGH
CVE-2026-12795 — BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Debug Flow. Executin…

litellm | Remote | Authentication
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
5.8 MEDIUM
CVE-2026-12789 — ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQu…

A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the function ilTrQuery::executeQueries of the file components/ILIAS/Tracking/classes/class.ilTrQuery.php of…

learning_management_system | Remote | Injection
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
6.5 MEDIUM
CVE-2026-12788 — zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 XML Parser import xml ex…

A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This vulnerability affects unknown code of the file /adpweb/a/base/barcodeDetail/import of th…

Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
6.5 MEDIUM
CVE-2026-12787 — zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testConnection Endpoint …

A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The manipulation of the arg…

Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
7.8 HIGH
CVE-2026-12786 — Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control

A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The …

ultraiso_premium_edition | Authorization
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
7.8 HIGH
CVE-2026-12784 — IM-Magic Partition Resizer Kernel Driver MDA_NTDRV.sys access control

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDA_NTDRV.sys of the component Kernel Driver. This manipulation causes improp…

partition_resizer | Authorization
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
0.0 NA
CVE-2026-52911 — ksmbd: scope conn->binding slowpath to bound sessions only

In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn->binding slowpath to bound sessions only When the binding SESSION_SETUP sets conn->binding = true, the flag sta…

linux_kernel | Authorization
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
7.8 HIGH
CVE-2026-12782 — EaseUS Partition Master Kernel Driver EUEDKEPM.sys access control

A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is an unknown function in the library EUEDKEPM.sys of the component Kernel Driver. The manipulation res…

partition_master | Authorization
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
7.8 HIGH
CVE-2026-12781 — EaseUS Partition Master Kernel Driver epmntdrv.sys access control

A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unknown function in the library epmntdrv.sys of the component Kernel Driver. The manipulation leads to…

partition_master | Authorization
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
7.8 HIGH
CVE-2026-12780 — AOMEI Backupper Kernel Driver amwrtdrv.sys access control

A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.sys of the component Kernel Driver. Executing a manipulation can lead to imprope…

backupper | Authorization
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
7.8 HIGH
CVE-2026-12779 — AOMEI Dynamic Disk Manager Kernel Driver ddmdrv.sys access control

A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the library ddmdrv.sys of the component Kernel Driver. Performing a manipulation r…

dynamic_disk_manager | Authorization
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
7.8 HIGH
CVE-2026-12778 — AOMEI Partition Assistant Kernel Driver ampa10.sys access control

A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in the library ampa10.sys of the component Kernel Driver. Such manipulation leads to…

partition_assistant | Authorization
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
6.5 MEDIUM
CVE-2026-12776 — Montodel House-Rental-Management index.php houses sql injection

A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the arg…

house-rental-management | Remote | Injection
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
7.5 HIGH
CVE-2026-12775 — Montodel House-Rental-Management login.php sql injection

A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functionality of the file /login.php. The manip…

house-rental-management | Remote | Injection
Jun 21, 2026 Jun 21, 2026
Jun 21, 2026
Jun 21, 2026
Showing 20 of 7374 Results