5925 matches found
SUSE CVE-2026-55170
OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorizationmodel identifier columns can compare case-distinct values such as...
CVE-2026-67425
creationtimestamp| type| source ---|---|--- 2026-07-30 16:35:10+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-qq9q-xgm3-xv9g 2026-07-30 22:32:21+00:00| seen| https://gist.github.com/alon710/118a4cdb35451ca1b82ac84f2659aa47 2026-07-31...
CVE-2026-6879
creationtimestamp| type| source ---|---|--- 2026-07-30 14:20:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrun4lvoax2v...
CVE-2026-44099
creationtimestamp| type| source ---|---|--- 2026-07-30 07:56:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bapsujimxsazk...
CVE-2026-14356
creationtimestamp| type| source ---|---|--- 2026-07-30 06:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtr7n32yt2x...
CVE-2026-17787
creationtimestamp| type| source ---|---|--- 2026-07-30 04:51:36+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 09:53:32+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...
CVE-2026-17931
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
EUVD-2025-210534
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...
Emerging Challenges in Threat Modeling for GenAI-Augmented Systems: A View from the Trenches
Threat modeling remains a central task in secure software engineering, as it enables the identification of security issues from system architectures. As Generative Artificial Intelligence GenAI becomes increasingly pervasive across software systems, traditional threat modeling methods e.g., STRID...
CVE-2026-54081
creationtimestamp| type| source ---|---|--- 2026-07-29 20:15:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54081...
CVE-2026-56389
creationtimestamp| type| source ---|---|--- 2026-07-29 12:15:03+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56389...
CVE-2026-18072
creationtimestamp| type| source ---|---|--- 2026-07-29 02:48:40+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrqvz4d6i72p 2026-07-29 05:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrra5ix6zt2y 2026-07-29 06:43:40+00:00| seen|...
PT-2026-65920
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activate case.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activate case.php in parameter id...
CVE-2025-67406
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...
CVE-2025-67406
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...
MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair
Memory systems allow agents to retain and reuse information from past interactions, but they can also let malicious content persist. A malicious instruction crafted by an attacker may be stored in long-term memory, recalled much later, and quietly shape a real action. Recent benchmarks increasing...
CVE-2026-62436
creationtimestamp| type| source ---|---|--- 2026-07-28 14:56:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpo7czz472g 2026-07-28 15:12:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpp535lxd22 2026-07-29 13:55:22+00:00| seen|...
CVE-2026-13872
An insufficient validation of untrusted input flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497977983...