[18/04/2026 06:06] Navios-tanque são vistos no Estreito de Ormuz em meio a bloqueio naval - CNN Brasil

[17/04/2026 18:41] Ex-presidente do BRB está em ala com medidas especiais de segurança - Correio Braziliense

[18/04/2026 06:00] Subsecretaria de Gastronomia do Rio, extinta após nove meses, foi projeto de ex-ministro da Saúde de Bolsonaro - O GLOBO

[18/04/2026 07:02] Flávio tem 48,1% e Lula, 40,3% no 2º turno em SP, diz pesquisa - Poder360

[18/04/2026 04:30] Missão em prol de Ramagem depende de aval do plenário e articulação nos EUA - CNN Brasil

[18/04/2026 08:57] Veja vídeo do incêndio no edifício Touring durante madrugada no Rio - Diário do Rio

[18/04/2026 10:53] Justiça condena menor que armou emboscada para vítima de estupro coletivo em Copacabana - R7

[17/04/2026 16:55] OAB/GO instaura procedimentos contra delegado que prendeu advogada - Migalhas

[17/04/2026 15:00] Crusoé: Ninguém quer Lula como mediador - O Antagonista

[18/04/2026 12:37] Duas pessoas morrem, e oito ficam feridas, em acidente no Norte de Minas - Estado de Minas

[CVE-2025-14951] [Modified: 24-12-2025] [Analyzed] [V3.1 S7.3:HIGH] A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument post_content leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

[CVE-2025-50681] [Modified: 02-01-2026] [Analyzed] [V3.1 S7.5:HIGH] igmpproxy 0.4 before commit 2b30c36 allows remote attackers to cause a denial of service (application crash) via a crafted IGMPv3 membership report packet with a malicious source address. Due to insufficient validation in the `recv_igmp()` function in src/igmpproxy.c, an invalid group record type can trigger a NULL pointer dereference when logging the address using `inet_fmtsrc()`. This vulnerability can be exploited by sending malformed multicast traffic to a host running igmpproxy, leading to a crash. igmpproxy is used in various embedded networking environments and consumer-grade IoT devices (such as home routers and media gateways) to handle multicast traffic for IPTV and other streaming services. Affected devices that rely on unpatched versions of igmpproxy may be vulnerable to remote denial-of-service attacks across a LAN .

[CVE-2025-66908] [Modified: 02-01-2026] [Analyzed] [V3.1 S5.3:MEDIUM] Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR image upload functionality. The OcrController in turms-ai-serving/src/main/java/im/turms/ai/domain/ocr/controller/OcrController.java uses the @FormData(contentType = MediaTypeConst.IMAGE) annotation to restrict uploads to image files, but this constraint is not properly enforced. The system relies solely on client-provided Content-Type headers and file extensions without validating actual file content using magic bytes (file signatures). An attacker can upload arbitrary file types including executables, scripts, HTML, or web shells by setting the Content-Type header to "image/*" or using an image file extension. This bypass enables potential server-side code execution, stored XSS, or information disclosure depending on how uploaded files are processed and served.

[CVE-2025-66909] [Modified: 02-01-2026] [Analyzed] [V3.1 S7.5:HIGH] Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability. The ExtendedOpenCVImage class in ai/djl/opencv/ExtendedOpenCVImage.java loads images using OpenCV's imread() function without validating dimensions or pixel count before decompression. An attacker can upload a specially crafted compressed image file (e.g., PNG) that is small when compressed but expands to gigabytes of memory when loaded. This causes immediate memory exhaustion, OutOfMemoryError, and service crash. No authentication is required if the OCR service is publicly accessible. Multiple requests can completely deny service availability.

[CVE-2025-66910] [Modified: 02-01-2026] [Analyzed] [V3.1 S6.0:MEDIUM] Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authentication system. The BaseAdminService class caches administrator passwords in plaintext within AdminInfo objects to optimize authentication performance. Upon successful login, raw passwords are stored unencrypted in memory in the rawPassword field. Attackers with local system access can extract these passwords through memory dumps, heap analysis, or debugger attachment, bypassing bcrypt protection.

[CVE-2025-66911] [Modified: 02-01-2026] [Analyzed] [V3.1 S6.5:MEDIUM] Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest() method in UserServiceController.java allows any authenticated user to query the online status, device information, and login timestamps of arbitrary users without proper authorization checks.

[CVE-2025-53922] [Modified: 02-01-2026] [Analyzed] [V3.1 S4.9:MEDIUM] Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to version 1.2.0, a user who is logged in as group manager may bypass intended restrictions on Contributions and Transactions. Version 1.2.0 fixes the issue.

[CVE-2025-66905] [Modified: 06-01-2026] [Analyzed] [V3.1 S7.5:HIGH] The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them against the filesystem. A remote attacker can include ../ sequences in the request path to escape the configured base directory and read arbitrary files from the host system.

[CVE-2025-66906] [Modified: 02-01-2026] [Analyzed] [V3.1 S6.1:MEDIUM] Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.

[CVE-2025-67442] [Modified: 02-01-2026] [Analyzed] [V3.1 S7.6:HIGH] EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effective input validation and filtering when processing file path parameters submitted by users.

[CVE-2025-58052] [Modified: 05-01-2026] [Analyzed] [V3.1 S8.1:HIGH] Galette is a membership management web application for non profit organizations. Starting in version 0.9.6 and prior to version 1.2.0, attackers with group manager role can bypass intended restrictions allowing unauthorized access and changes despite role-based controls. Since it requires privileged access initially, exploitation is restricted to malicious insiders or compromised group managers accounts. Version 1.2.0 fixes the issue.

[CVE-2025-58053] [Modified: 05-01-2026] [Analyzed] [V3.1 S9.8:CRITICAL] Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.

[CVE-2025-63665] [Modified: 05-01-2026] [Analyzed] [V3.1 S9.8:CRITICAL] An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window.

[CVE-2025-66580] [Modified: 02-01-2026] [Analyzed] [V3.1 S9.6:CRITICAL] Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application allows the execution of arbitrary JavaScript via `javascript:`. An attacker can exploit this to inject a malicious Model Context Protocol (MCP) server configuration, leading to Remote Code Execution (RCE) on the victim's machine when the node is clicked. Version 0.11.1 fixes the issue.

[CVE-2025-68477] [Modified: 02-01-2026] [Analyzed] [V3.1 S7.7:HIGH] Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, Langflow provides an API Request component that can issue arbitrary HTTP requests within a flow. This component takes a user-supplied URL, performs only normalization and basic format checks, and then sends the request using a server-side httpx client. It does not block private IP ranges (127[.]0[.]0[.]1, the 10/172/192 ranges) or cloud metadata endpoints (169[.]254[.]169[.]254), and it returns the response body as the result. Because the flow execution endpoints (/api/v1/run, /api/v1/run/advanced) can be invoked with just an API key, if an attacker can control the API Request URL in a flow, non-blind SSRF is possible—accessing internal resources from the server’s network context. This enables requests to, and collection of responses from, internal administrative endpoints, metadata services, and internal databases/services, leading to information disclosure and providing a foothold for further attacks. Version 1.7.0 contains a patch for this issue.

[CVE-2025-14958] [Modified: 30-12-2025] [Analyzed] [V3.1 S5.3:MEDIUM] A security flaw has been discovered in floooh sokol up to 33e2271c431bf21de001e972f72da17a984da932. This vulnerability affects the function _sg_pipeline_common_init in the library sokol_gfx.h. Performing manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit has been released to the public and may be exploited. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The patch is named 33e2271c431bf21de001e972f72da17a984da932. It is suggested to install a patch to address this issue.

[CVE-2025-14960] [Modified: 30-12-2025] [Analyzed] [V3.1 S7.3:HIGH] A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unknown function of the file /editeddonor.php. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

[CVE-2025-68430] [Modified: 13-01-2026] [Analyzed] [V3.1 S4.3:MEDIUM] CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.8.1 through 2.52.0, an attacker with an account on a CVAT instance is able to retrieve the contents of any file system directory accessible to the CVAT server. The exposed information is names of contained files and subdirectories. The contents of files are not accessible. Version 2.53.0 contains a patch. No known workarounds are available.

[CVE-2025-68478] [Modified: 02-01-2026] [Analyzed] [V3.1 S7.1:HIGH] Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's `fs_path`, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed directory enforcement, so absolute paths (e.g., /etc/poc.txt) are interpreted as is. Version 1.7.0 fixes the issue.

[CVE-2025-14961] [Modified: 30-12-2025] [Analyzed] [V3.1 S7.3:HIGH] A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unknown function of the file /editedcampaign.php. The manipulation of the argument campaignname results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.