Vulnerabilities
Xinference Path Traversal Allows Unauthenticated File Deletion on Windows
Attackers can overwrite or delete JSON configuration files in Xinference 4.0.1 and earlier by injecting backslash sequences into model registration requests.
Windows
Everything NetSec Observer has reported about Windows: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Windows iSCSI Use-After-Free CVE-2026-69883: Critical 9.8 RCE Vulnerability
A critical remote code execution vulnerability in the Windows iSCSI service allows unauthorized network attackers to execute arbitrary code without prior access.