495025 matches found
LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce
pop filter bypasses memoryLimit accounting that its array-filter siblings enforce CWE: CWE-770 Allocation of Resources Without Limits or Throttling — sibling class of GHSA-8xx9-69p8-7jp3 and GHSA-2546-xv4c-mc8g, applied to memoryLimit instead of renderLimit Summary The pop array filter at...
electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`
Summary AppImage targets built by app-builder-lib could use an empty path component when setting the LDLIBRARYPATH environment variable at runtime. This causes the current working directory to be added to the dynamic linker search path, which may allow an attacker to execute arbitrary code by...
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and deploy an autonomous artificial intelligence AI agent inside a victim's organization. The vulnerability has bee...
Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do
AI agent security is moving through a familiar maturity curve: adoption, then visibility, and finally, control. But what we've collectively discovered is that enforcing least privilege for AI agents is harder than we ever imagined. This is why there are so many approaches, from prompt filtering t...
Exploit for CVE-2026-65761
CVE-2026-65761 — EasyStore Joomla Pre-Auth SQL Injection filter...
Why AI Needs a “Genie Coefficient”
This essay was written with Barath Raghavan, and originally appeared inThe Guardian. Major benchmarks measure what AI can do. None measure whether it does what you mean: the distance between what you ask an AI to do and the unspoken assumptions about how you want the AI to do it. We propose a new...
Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection. The agent then worked through the ministry's...
Malicious code in intel-cicd-repo-infrastructure (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 26e9f9760ea5108609a4a105c621c9ed1ac03930e70fe4cfe400f7c256a7641a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Exploit for CVE-2026-9198
CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Logi...
Malicious code in karpatkit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0a7a9ac195db3ed802d44e5d140f1425f53432c30aa0ddddfd46a91839fe8dff During import, the package exfiltrates sensitive data env variables, credential files, shell history, cryptocurrency wallet data etc.. It appears to be targeti...
Malicious code in karpatkey (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ea7a30728a3c4f46fee3153895404941b4363cb7086f5efe55e9ae9931913395 During import, the package exfiltrates sensitive data env variables, credential files, shell history, cryptocurrency wallet data etc.. It appears to be targeti...
Security Bulletin: IBM DevOps Loop has multiple vulnerabilities
Summary IBM DevOps Loop v2.0.2 addresses multiple vulnerabilities. Vulnerability Details CVEID:CVE-2026-42264 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties auth, baseURL, socketPath,...
CVE-2026-63317
Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName and invoke its no-arg constructor...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228 — Log4Shell: Apache Log4j2 Remote Code Executio...
CVE-2026-63317
CVE-2026-63317 affects Apache OpenNLP versions before 2.5.10 and before 3.0.0-M5. The vulnerability arises from three code paths that load a class by its fully-qualified name via Class.forName() without validating the class name or type: (1) GeneratorFactory reading the class attribute in XML fea...
EUVD-2026-48529
Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName and invoke its no-arg constructor...
CVE-2026-63317 Apache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML
Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName and invoke its no-arg constructor...
CVE-2026-63317
Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName and invoke its no-arg constructor...
Malicious code in subapp-pkg-util (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9ec05191ebd2f02dcf912c49fc5d345c3b9201fb691a11a0142fec91cc6d42d4 The OpenSSF Package Analysis project identified 'subapp-pkg-util' @ 99.0.1 npm as malicious. It is considered malicious because: - The package...