4947 matches found
Security Bulletin: Multiple vulnerabilities in IBM Controller
Summary Multiple vulnerabilities were addressed in IBM Controller 11.1.2. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could...
EUVD-2025-201103
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick...
EUVD-2025-201069
Malicious code in elf-stats-nutmeg-cookie-584 npm...
CVE-2025-39931
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...
EUVD-2025-200927
Malicious code in elf-stats-evergreen-muffin-867 npm...
Security Bulletin: Multiple vulnerabilities in IBM QRadar Use Case Manager app
Summary Multiple vulnerabilities were addressed in IBM QRadar Use Case Manager app version 4.1.0 Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. When Axios prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a...
📄 WhatsApp Android Contact Gating Bypass
WhatsApp Android has a contact gating bypass in groups that leads to interaction-less media download. Background To prevent security issues and spam, WhatsApp for Android requires some form of user interaction to automatically download files from non-contacts: a. After adding someone as a contact...
Rethinking Cybersecurity Ontology Classification and Evaluation: Towards a Credibility-Centered Framework
This paper analyzes the proliferation of cybersecurity ontologies, arguing that this surge cannot be explained solely by technical shortcomings related to quality, but also by a credibility deficit - a lack of trust, endorsement, and adoption by users. This conclusion is based on our first...
Systems Security Foundations for Agentic Computing
This paper articulates short- and long-term research problems in AI agent security and privacy, using the lens of computer systems security. This approach examines end-to-end security properties of entire systems, rather than AI models in isolation. While we recognize that hardening a single mode...
CVE-2025-7449
creationtimestamp| type| source ---|---|--- 2025-11-26 23:56:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6l2mpgooh2u 2025-11-27 14:45:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m6mmc2leh72h...
Security Bulletin: Vulnerability in IBM DevOps Solution Workbench
Summary The following vulnerability was addressed in IBM DevOps Solution Workbench version 5.1. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent...
A Safety and Security Framework for Real-World Agentic Systems
This paper introduces a dynamic and actionable framework for securing agentic AI systems in enterprise deployment. We contend that safety and security are not merely fixed attributes of individual models but also emergent properties arising from the dynamic interactions among models, orchestrator...
CVE-2025-64064
creationtimestamp| type| source ---|---|--- 2025-11-25 21:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6idggbi4t2x...
Detego Global Launches Case Management Platform for Digital Forensics and Incident Response Teams
Horsham, United Kingdom, 25th November 2025, CyberNewsWire...
EUVD-2025-199545
Not used...
CVE-2025-10144
creationtimestamp| type| source ---|---|--- 2025-11-25 02:00:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gam2wkko2q...
EUVD-2025-198779
Malicious code in @seung-ju/react-hooks npm...
CVE-2025-66098
creationtimestamp| type| source ---|---|--- 2025-11-21 14:28:53+00:00| seen| https://gist.github.com/Darkcrai86/b3d34d03dabeae207956865bc2141a58 2025-11-21 15:23:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m65lmlhcng2q...
SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny
The U.S. Securities and Exchange Commission SEC has abandoned its lawsuit against SolarWinds and its chief information security officer, alleging that the company had misled investors about the security practices that led to the 2020 supply chain attack. In a joint motion filed November 20, 2025,...
