Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.5 CVE-2026-44017

Docling: Unsafe Zip Extraction in EasyOCR Model Download_CVE-2026-44017

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the...

docling-project docling < 2.91.0 CVE
HIGH 8.2 CVE-2026-44016

Docling: Unsafe Playwright-based HTML Rendering_CVE-2026-44016

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82...

docling-project docling >= 2.82.0, < 2.91.0 CVE
HIGH 7.5 PACKETSTORM:224227

📄 HTTP.sys HTTP/2 Denial of Service_PACKETSTORM:224227

This advisory provides simple proof of concept details to trigger the HTTP/2 denial of service condition related to malformed Accept-Encoding heade...

N/A N/A PACKETSTORM
HIGH 10 DC8CF54B-5E0D-

pentest-metasploit_DC8CF54B-5E0D-55F4-B5C1-920406A0FF9F

Penetration Testing with Metasploit A structured penetration testing automation framework developed by Aadarsh Bonthula as part of a cybersecurity ...

N/A N/A GITHUBEXPLOIT
HIGH 7.6 CVE-2025-71361

picklescan – Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tip_CVE-2025-71361

picklescan before 0.0.29 fails to detect malicious idlelib.calltip.Calltip.fetch_tip calls in pickle files, allowing remote code execution. Attacke...

picklescan picklescan CVE
HIGH 7.1 CVE-2026-57303

CVE-2026-57303_CVE-2026-57303

Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to ...

Jenkins Project Jenkins Assembla Plugin CVE
HIGH 8.8 CVE-2026-57301

CVE-2026-57301_CVE-2026-57301

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers w...

Jenkins Project Jenkins OWASP ZAP Plugin 1.0.7 CVE
HIGH 8.8 CVE-2026-57296

CVE-2026-57296_CVE-2026-57296

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom workspace path provided to the e...

Jenkins Project Jenkins External Workspace Manager Plugin 1.3.2 CVE
HIGH 7.5 CVE-2026-57281

CVE-2026-57281_CVE-2026-57281

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, ...

Jenkins Project Jenkins Script Security Plugin CVE
HIGH 8.8 CVE-2026-57280

CVE-2026-57280_CVE-2026-57280

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the elements of typed for-each ...

Jenkins Project Jenkins Script Security Plugin CVE