CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-

Evolution CMS Reflected XSS v3.2.3 Author: Sergio Description: A cross-site scripting XSS reflected vulnerability in the evolution v.3.2.3 installation process connection allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the uid parameter. Attack Vectors...

CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.

CVE-2026-85046 + CVE-2026-87491 + CVE-2026-87606 + CVE-2026-87575 Talk about a giant pain to sneak a path out of the renderer. 550 mg of caffiene and going up and down chrome CVE's all night, you too can bounce out of the renderer. CVE-2026-85046 corrupts a Float64Array for V8-cage read/write...

CVE-2025-54957

Dolby Unified Decoder CVE-2025-54957 POC When a file is processed by Dolby's DDPlus Unified Decoder, an out of bounds write is possible when the evolution data is processed. The decoder writes evolution information into a large, heap-like contiguous buffer contained by a larger struct, and the...

TRACE

TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking Official implementation for TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking. 📖 Overview Large language model LLM agents can autonomously plan, invoke tools, interact with environments, and execute long-horizon workflows...

-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options

Evolution CMS Reflected XSS v3.2.3 Author: Sergio Description: Multiple Cross-site scripting XSS reflected vulnerabilities in the evolution v.3.2.3 installation process Admin options allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the cmsadmin,...

When Experience Becomes a Backdoor: Poisoning Self-Evolving LLM Agents Via Failure-Aware Task Optimization

Large language model LLM agents increasingly improve themselves through self-evolution, distilling execution experience into persistent, reusable skills. However, this persistence creates a new attack surface: malicious rules implanted into skills can compromise subsequent agent behavior. Existin...

Cumulative and Audited Guardrail Tool Evolution for LLM Agent Safety

Large language model LLM agents increasingly operate in open-world environments where safety risks cannot be fully predefined. However, most existing guardrail mechanisms remain static, relying on fixed rules, prompts, or classifiers that generalize poorly to emerging risks. Here we present EVOLV...

[SECURITY] Fedora 45 Update: evolution-ews-3.62.1-1.fc45

This package allows Evolution to interact with Microsoft Exchange servers, versions 2007 and later, through its Exchange Web Services EWS interface...

[SECURITY] Fedora 45 Update: evolution-data-server-3.62.1-1.fc45

The evolution-data-server package provides a unified backend for programs tha t work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

[SECURITY] Fedora 45 Update: evolution-3.62.1-1.fc45

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The components which make up Evolution are tightly integrated with one another and act as a seamless personal information-management tool...

[SECURITY] Fedora 44 Update: evolution-data-server-3.60.2-2.fc44

The evolution-data-server package provides a unified backend for programs tha t work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

[SECURITY] Fedora 44 Update: evolution-3.60.2-3.fc44

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The components which make up Evolution are tightly integrated with one another and act as a seamless personal information-management tool...

Fedora 45 : evolution / evolution-data-server / evolution-ews (2026-cb44cadc9a)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-cb44cadc9a advisory. Update to 3.62.1 evolution-data-server Bug Fixes: I661 - OAuth2: Resolve collection as credential source on the token path Tobias Mueller I666 - OAuth2: Read...

Fedora 44 : evolution / evolution-data-server (2026-df461d043b)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-df461d043b advisory. Backport upstream patches for CVE-2026-110777 Calendar: Limit which local files are inlined in components Tenable has extracted the preceding description blo...

Appreciation Teaches Unauthorized Execution: Self-Evolution Degrades the Robustness of Personal Agents to Indirect Prompt Injection

Self-evolving personal agents act for users and learn from user feedback. However, if an agent obeys an instruction that an untrusted third party hides in content, the third party gains control of the agent. Such indirect prompt injection IPI poses severe risks. We investigate whether...

Updated evolution package fixes a security vulnerability

Javascript execution via spoofed vcard control bypasses mail script-markup restriction. CVE-2026-88859...

MGASA-2026-0554 Updated evolution package fixes a security vulnerability

Javascript execution via spoofed vcard control bypasses mail script-markup restriction. CVE-2026-88859...

[SECURITY] [DSA 6534-3] webkit2gtk regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-6534-3 [email protected] https://www.debian.org/security/ Alberto Garcia October 22, 2026 https://www.debian.org/security/faq -...

Membership Inference Attack on Private Evolution

Synthetic Data Generation SDG is an actively studied way to enable safe sharing of private data more broadly. Inference-only SDG methods, such as Private Evolution PE, are particularly appealing, as they can leverage black-box access to pre-trained foundation models to generate high quality data...

evolution-data-server Database Unauthorized Access

The vulnerability of the ecmbsavecomponentwrappersync function in the evolution-data-server database server is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...