277651 matches found
ROS-20260930-73-0092
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Towards Hierarchical Cyber Defense with Large Language Models: From Planning to Execution
An autonomous cyber defender trained with reinforcement learning RL is typically tied to the network on which it was trained, limiting its ability to generalize as network scale changes. Hierarchical RL reduces decision complexity by separating strategic targeting from tactical execution, but it...
D-Link DIR-822A Router Tunnel Set Params Buffer Overflow
The vulnerability of the tunnelsetparams function in the L2TP Control Message Parser component of D-Link DIR-822A router microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...
L2TP Control Channel Parser Heap Buffer Overflow DoS
The vulnerability of the tunnelsetparams function in the tunnel.c file of the L2TP Control Channel Parser component of the D-Link DIR-895L router microprogramming system is related to the escape operation from the buffer into memory. Exploiting this vulnerability could allow a remote attacker to...
Azure SQL Database Privilege Escalation
The vulnerability of the Azure SQL Database cloud relational database model is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...
PT-2026-103169
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-97267: Missing Authorization
Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...
ROS-20260930-73-0058
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Rocky Linux 9.6 [TuxCare] Security Update: cpio Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1787310466)
The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787310466 advisory. - GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca...
CentOS Linux 8.4 [TuxCare] Security Update: openssh / openssh-askpass / openssh-cavs / openssh-clients / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1767627828)
The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1767627828 advisory. - ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources,...
PT-2026-103286
LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pause generation, /abort request, /flush cache, and /init weights update group to disrupt inference operations and wedge...
CVE-2026-51867
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...
PT-2026-103186
Unauthenticated Broken Access Control in Hostinger Migrator = 1.0 versions...
PT-2026-103491
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...
PT-2026-103203
Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...
CVE-2026-55494: Improper Access Control
Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.4, Tugtainer Agent allows unauthenticated access to Docker management APIs when AGENTSECRET is not configured. The Agent uses request signatures to protect its API routes. However, in agent/auth.py,...
CVE-2026-100259: Incorrect Authorization
In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...
CVE-2026-97259: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4...