The Exploit Doesn’t Exist. You Can Still Prove It Works Against You
Attackers can now weaponize newly disclosed vulnerabilities far faster than most organizations can patch them. Picus Security explains how security
Read More
Month: June 2026
Algerian man charged with running two cybercrime marketplaces
Abdellah Belmili allegedly ran two black-market websites selling stolen financial credentials and custom-built phishing kits targeting major American banks, federal
Read MoreCVE-2026-56258 | Crawl4AI up to 0.8.7 PDF Endpoint output_path path traversal (GHSA-7cx2-g3h9-382p)
A vulnerability was found in Crawl4AI up to 0.8.7. It has been declared as critical. This issue affects some unknown
Read MoreCVE-2025-71365 | picklescan up to 0.0.32 numpy.f2py.crackfortran.myeval deserialization (GHSA-3329-ghmp-jmv5)
A vulnerability was found in picklescan up to 0.0.32. It has been rated as critical. Impacted is the function numpy.f2py.crackfortran.myeval.
Read MoreCVE-2026-56243 | Capgo up to 12.128.1 authentication bypass (GHSA-6g74-8cpq-g2c8)
A vulnerability categorized as critical has been discovered in Capgo up to 12.128.1. The affected element is an unknown function.
Read MoreCVE-2025-71337 | Flowise up to 3.0.9 Account Profile Endpoint unverified password change (GHSA-x39m-3393-3qp4)
A vulnerability identified as critical has been detected in Flowise up to 3.0.9. The impacted element is an unknown function
Read MoreCVE-2025-71370 | picklescan up to 0.0.27 torch.jit.unsupported_tensor_ops.execWrapper deserialization (GHSA-vr7h-p6mm-wpmh)
A vulnerability labeled as critical has been found in picklescan up to 0.0.27. This affects the function torch.jit.unsupported_tensor_ops.execWrapper. Executing a
Read MoreCVE-2025-71376 | picklescan up to 0.0.28 Autocomplete deserialization (GHSA-7cq8-mj8x-j263)
A vulnerability marked as critical has been reported in picklescan up to 0.0.28. This impacts the function idlelib.autocomplete.AutoComplete.fetch_completions of the
Read MoreCVE-2026-10711 | AKIN CafePlus 12.05.03 missing authentication
A vulnerability described as critical has been identified in AKIN CafePlus 12.05.03. Affected is an unknown function. The manipulation results
Read MoreCVE-2026-56376 | ImageMagick up to 7.1.2-14 Image File use after free (GHSA-2gq3-ww97-wfjm)
A vulnerability classified as critical has been found in ImageMagick up to 7.1.2-14. Affected by this vulnerability is an unknown
Read More