Kythos AI vulnerability intelligence
Zero-Day Exploits / Vulnerabilities
A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.
Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.
Confirmed exploitation intelligence
Zero-Day Exploits / Vulnerabilities
Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.
Entries 1,345–1,368 of 1,768
CVE-2016-5195: Linux Kernel Race Condition Vulnerability
Linux · Kernel
Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.
Required action: Apply updates per vendor instructions.
CVE-2016-4117: Adobe Flash Player Arbitrary Code Execution Vulnerability
Adobe · Flash Player
An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2016-1019: Adobe Flash Player Arbitrary Code Execution Vulnerability
Adobe · Flash Player
Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2016-0099: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
Microsoft · Windows
A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.
Required action: Apply updates per vendor instructions.
CVE-2015-7645: Adobe Flash Player Arbitrary Code Execution Vulnerability
Adobe · Flash Player
Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2015-5119: Adobe Flash Player Use-After-Free Vulnerability
Adobe · Flash Player
A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2015-4902: Oracle Java SE Integrity Check Vulnerability
Oracle · Java SE
Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.
Required action: Apply updates per vendor instructions.
CVE-2015-3043: Adobe Flash Player Memory Corruption Vulnerability
Adobe · Flash Player
A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2015-2590: Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
Oracle · Java SE
An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2015-2545: Microsoft Office Malformed EPS File Vulnerability
Microsoft · Office
Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.
Required action: Apply updates per vendor instructions.
CVE-2015-2424: Microsoft PowerPoint Memory Corruption Vulnerability
Microsoft · PowerPoint
Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.
Required action: Apply updates per vendor instructions.
CVE-2015-2387: Microsoft ATM Font Driver Privilege Escalation Vulnerability
Microsoft · ATM Font Driver
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.
Required action: Apply updates per vendor instructions.
CVE-2015-1701: Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.
Required action: Apply updates per vendor instructions.
CVE-2015-1642: Microsoft Office Memory Corruption Vulnerability
Microsoft · Office
Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.
Required action: Apply updates per vendor instructions.
CVE-2014-4114: Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
Microsoft · Windows
A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.
Required action: Apply updates per vendor instructions.
CVE-2014-0496: Adobe Reader and Acrobat Use-After-Free Vulnerability
Adobe · Reader and Acrobat
Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.
Required action: Apply updates per vendor instructions.
CVE-2013-5065: Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft · Windows
Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.
Required action: Apply updates per vendor instructions.
CVE-2013-3897: Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft · Internet Explorer
A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.
Required action: Apply updates per vendor instructions.
CVE-2013-3346: Adobe Reader and Acrobat Memory Corruption Vulnerability
Adobe · Reader and Acrobat
Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.
Required action: Apply updates per vendor instructions.
CVE-2013-1675: Mozilla Firefox Information Disclosure Vulnerability
Mozilla · Firefox
Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent[network address omitted]mPreviousScale and nsDOMSVGZoomEvent[network address omitted]mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Required action: Apply updates per vendor instructions.
CVE-2013-1347: Microsoft Internet Explorer Remote Code Execution Vulnerability
Microsoft · Internet Explorer
This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.
Required action: Apply updates per vendor instructions.
CVE-2013-0641: Adobe Reader Buffer Overflow Vulnerability
Adobe · Reader
A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2013-0640: Adobe Reader and Acrobat Memory Corruption Vulnerability
Adobe · Reader and Acrobat
An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2013-0632: Adobe ColdFusion Authentication Bypass Vulnerability
Adobe · ColdFusion
An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.
Required action: Apply updates per vendor instructions.
Complete fixed-window snapshot
CVEs — Past 48 Hours
All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.
Entries 769–792 of 1,125
CVE-2026-76563
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows Using Malicious Files. This issue affects Fileorbis: before 12.5.4.
CVE-2026-123059
In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keycloak enabled store the client secret of the `basyx-technical-user` OAuth2 client in cleartext in a Kubernetes ConfigMap. This client uses the client-credentials grant and its service account holds the realm `admin`…
CVE-2026-123028
A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /admin_edit.php. The manipulation of the argument bookisbn with the input 1%27%20AND%20GTID_SUBSET(CONCAT(0x71717a6b71,(SELECT%20(ELT(6040=6040,1))),0x716b6a7171),6040)–%20LpDt as part of String leads to sql injection. It is possible to initiate the…
CVE-2026-123024
A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function get_current_user_id of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed remotely. The exploit has been disclosed…
CVE-2026-123023
A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function check_permissions of the file src/agentscope/tool/_builtin/_bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used.…
CVE-2026-123022
A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/_config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be launched remotely. The exploit…
CVE-2026-117691
A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server processes percent-encoded parameter names (like %53AMLResponse) while the signature verification logic only checks literal parameter names. An attacker can use this discrepancy to provide a crafted, unsigned SAML…
CVE-2026-114277
Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz's optional Janrain Engage Social Login integration in the ecommerce component improperly binds authenticated external identities to local user accounts. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which…
CVE-2026-114272
Authorization Bypass Through User-Controlled Key in the content viewing component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user with role-scoped content view permission to read the data of content they are not authorized to view via a ViewSimpleContent request that combines…
CVE-2026-114271
Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated low-privileged user, such as a self-registered ecommerce customer, to modify another party's shopping list or take ownership of it, and thereby read its contents,…
CVE-2026-114235
Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user with only view access to the Order Manager to modify the shipment tracking number of any order via a direct request to the updateTrackingNumber endpoint.…
CVE-2026-114233
Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user who holds only order view permissions (ORDERMGR_VIEW), without ORDERMGR_UPDATE or any role on the order, to modify approved orders, changing a ship group's shipping address and…
CVE-2026-114229
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Catalog image viewer in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an unauthenticated attacker to execute arbitrary JavaScript in the browser session of a logged-in back-office user via a crafted viewImage URL…
CVE-2026-109928
Incorrect Implementation of Authentication Algorithm in the password-reset and login JWT validation in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an attacker who has obtained a user's password-reset token (via email interception, log exposure, or a man-in-the-middle on the mail transport) to authenticate as…
CVE-2026-109856
Direct Request ('Forced Browsing') to Financial Account services in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user with any valid low-privilege account to create, modify, and cancel financial account transactions and balances without appropriate permission via direct requests to the createFinAccount, updateFinAccount,…
CVE-2026-109837
Authorization Bypass Through User-Controlled Key in Order Returns in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user with low-privileged Order Manager access to associate another party's OrderItem with a ReturnItem on a ReturnHeader they control, via the createReturnItem service. Users are recommended…
CVE-2026-109129
Authorization Bypass Through User-Controlled Key in the Order Manager component in Apache OFBiz 24.09.07 on all platforms allows an authenticated user with only view-level order permissions to modify or create OrderPaymentPreference records belonging to orders outside their authorized scope via the updateOrderPaymentPreference service, by supplying an…
CVE-2026-107912
A flaw was found in the management interface of the Quarkus framework, specifically within the quarkus-vertx-http component. The issue occurs when the framework incorrectly combines the management root path with specific permission rules, leading to a situation where security policies are applied to the wrong internal…
CVE-2026-105461
Missing check for ORDERMGR_UPDATE in ordermgr allows user with only ORDERMGR_VIEW permission to update orders. Affected versions before : 24.09.08 Users are recommended to upgrade to version 24.09.08 which fixes this issue.
CVE-2026-105330
Use of Hard-coded Cryptographic Key in JWT token authentication in Apache OFBiz 24.09.06 and 24.09.07 on all platforms allows an unauthenticated, network-reachable attacker to obtain full administrative access via a forged JWT signed with the factory-default security.token.key value that CVE-2026-31986 removed from newly generated configurations, on…
CVE-2026-105325
Missing check for ACCOUNTING_UPDATE / ACCOUNTING_CREATE in accounting in allows user with only ACCOUNTING_VIEW permission to update/create PaymentApplication. Affected versions before : 24.09.08 Users are recommended to upgrade to version 24.09.08 which fixes this issue.
CVE-2026-105321
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows SQL Injection. This issue affects Kobikom: before KobiPBX-FOP3-SEC-r1.
CVE-2026-104720
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows Path Traversal. This issue affects Kobikom: before KobiPBX-FOP3-SEC-r1.
CVE-2026-100228
Improper Input Validation in Order Returns in Apache OFBiz 24.09.07 on all platforms allows an authenticated user without the ORDERMGR_CREATE permission to persist an arbitrary price on a return item via the createReturnItem service, bypassing the intended server-computed price ceiling. Users are recommended to upgrade to…