robustbench

RobustBench: um benchmark padronizado de robustez adversarial Francesco Croce University of Tübingen, Maksym Andriushchenko EPFL, Vikash Sehwag Princeton University, Edoardo Debenedetti EPFL, Nicolas Flammarion EPFL, Mung Chiang Purdue University, Prateek Mittal Princeton University, Matthias Hei...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

dns-benchmark-tool

⚠️ questo progetto è stato spostato e non è più mantenuto. installa il successore: pip install net-benchmark repository: https://github.com/net-benchmark/net-benchmark tutti i comandi e flag esistenti rimangono completamente compatibili. DNS Benchmark Tool Parte di BuildTools - Network Performance...

CVE-2026-18287 Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability

Aeon loadtimeseriessegmentationbenchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2026-71694

An issue in Berkeley Out-of-Order Machine BOOM / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, CSRFile logic in ProcessorFuzz...

CVE-2026-71694

An issue in Berkeley Out-of-Order Machine BOOM / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, CSRFile logic in ProcessorFuzz...

EUVD-2026-62483

An issue in Berkeley Out-of-Order Machine BOOM / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, CSRFile logic in ProcessorFuzz...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, newrelic-infra-operator, nova, stakater-reloader, docker-machine-driver-linode, migrate, cluster-api-ipam-provider-in-cluster, paranoia, db-operator, crossplane-provider-aws-kinesis, manifest-tool, litestream, kubernetes-event-exporter,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, docker-machine-driver-linode, crossplane-provider-aws-kinesis, scorecard, zot, flux-notification-controller, falcoctl, cloudflared, nfpm, step, sops, minio, chisel, kyverno, crossplane-provider-aws-cloudwatchlogs,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gostatsd, newrelic-infra-operator, stakater-reloader, verticadb-operator, dkron, docker-machine-driver-linode, go-licenses, cluster-api-ipam-provider-in-cluster, docker-credential-gcr, falco-no-driver, db-operator, paranoia, crossplane-provider-aws-kinesis,...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio – Add spinlock protection with virtqueue notification When a virtual machine boots with a virtio-crypto PCI device and a built-in backend, run the openssl benchmark command with multiple processes. For example:...

What SecureIQLab Cloud WAAP 5.0 means for your application security

You cannot verify a vendor’s security claims from their own datasheet, including ours. That is why independent validation matters. In our recent guide to the best WAAP solutions Best WAAP Solutions 2026: Enterprise Buyer Guide, we argued that every serious shortlist should include independent...

Piggybacking on Perception: Stealthy Concurrent Audio Prompt Injections against Multimodal LLM Agents

Large Language Model LLM-driven multimodal agents are increasingly deployed to execute autonomous tasks via continuous audio interaction. While this paradigm enhances interaction naturalness, it introduces a critical yet under-explored attack surface, as audio inputs inevitably contain...

Open Security Benchmark: Towards Autonomous Enterprise Cyber Defense

Enterprises are moving toward autonomous cyber defense: agentic AI that builds situational awareness of an organization's security state and reasons from it to assessments, decisions, and actions. This rests on a holistic view of the enterprise's security state, the continuous, cross-vendor pictu...

PT-2026-65951

Aeon load time series segmentation benchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a...

relay-secreport-bench

secreport-bench — the Security-Report Benchmark An evaluation...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: scorecard, zot, flux-notification-controller, falcoctl, nfpm, step, sops, minio, chisel, kyverno, terraform-provider-azurerm, gitea, terragrunt, rancher-machine, nuclei, gatus, osv-scanner, loki, steampipe, trivy, go-discover, ko, helm, neuvector-sigstore-interface,...

Siemens RUGGEDCOM RST2428P Missing Synchronization (CVE-2026-23229)

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-c...

Smarter Saboteurs, Better Fixers: Scaling and Security in Linear Multi-Agent Workflows

As LLM-based multi-agent systems MAS are deployed in the wild, the resilience of their collaboration structures against adversarial compromise becomes a critical safety concern. Attackers may leverage prompt-injection or jailbreaking to sabotage individual agents within MAS workflows, but the...

mem0 安全漏洞

mem0 is an open-source benchmark tool for efficient memory algorithms developed by Mem0. Versions of mem0 prior to 0.2.8 contain security vulnerabilities. These vulnerabilities stem from a lack of authorization verification, which may cause authenticated users with an API key to redirect all LLM...