Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization when replacing Process Groups containing components marked with the Restricted annotation. An attacker can gain unauthorized access to restricted components by submitting requests to replace Process Groups without...

Google Android Permission Elevation Vulnerability (CNVD-2026-29383)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a vulnerability in Google Android, which is caused by integer overflow in the Framework components. Attackers can exploit this vulnerability to gain higher privileges on the system...

External Data Extraction Attacks against Retrieval-Augmented Large Language Models

In recent years, RAG has emerged as a key paradigm for enhancing large language models LLMs. By integrating externally retrieved information, RAG alleviates issues like outdated knowledge and, crucially, insufficient domain expertise. While effective, RAG introduces new risks of external data...

Symfony Security Vulnerabilities

Symfony is a PHP framework for web and console applications and a set of reusable PHP components from Symfony, Inc. A security vulnerability exists in Symfony that stems from improper input filtering...

PT-2021-17704

Name of the Vulnerable Software and Affected Versions: Appspace version 6.2.4 Description: The issue concerns a broken authentication mechanism. This allows pages such as "/medianet/mail.aspx" to be accessed directly, exposing the framework's layouts, menus, and functionalities. Recommendations:...