Evaluating System One Models for Agent Security Decisions: Reliability, Calibration, and Selective Automation

Model-based judges support agent security by detecting prompt injections, assessing interaction risks, and screening harmful requests. System One models expose typed decisions with probabilities that software can use to allow, block, or escalate inputs, but whether these probabilities support...

Calibrated Decision Models for Autonomous Penetration-Testing Harnesses: JEV and Laya As System One Decision Layers for LLM-Driven Pentest Agents

Autonomous penetration-testing harnesses use large language models LLMs for reconnaissance, exploitation, and reporting, but often rely on those same models to confirm findings, grade severity, and select agents. This can lead to false positives, inflated severity, and wasted compute. We examine...

CVE-2021-22440

There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly...

CVE-2021-22440

There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly...

PT-2021-15058

Name of the Vulnerable Software and Affected Versions: HUAWEI Mate 20 versions 9.0.0.195C01E195R2P1 through 9.1.0.139C00E133R3P1 HUAWEI Mate 20 Pro versions 9.0.0.187C432E10R1P16 through 9.0.0.278C185E10R2P1 Hima-L29C version 9.0.0.105C10E9R1P16 Hima-L29C version 9.0.0.105C185E9R1P16 Hima-L29C...

CVE-2021-22440: Improper Limitation of a Pathname to a Restricted Directory

There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly...

PT-2020-20543

Name of the Vulnerable Software and Affected Versions Huawei HONOR 20 PRO affected versions not specified Huawei Mate 20 affected versions not specified Huawei Mate 20 Pro affected versions not specified Huawei Mate 20 X affected versions not specified Huawei P30 affected versions not specified...

CVE-2020-9109

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful...

CVE-2020-9109

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful...

Information disclosure

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful...

CVE-2020-9109

CVE-2020-9109 affects several Huawei smartphones (e.g., Mate 20, Mate 20 X, P30 Pro, Laya-AL00EP, Tony-AL00B/TL00B) with an information-disclosure vulnerability caused by insufficient validation of the identity of a smart wearable device in specific scenarios. The attacker would need access to ce...

CVE-2020-9109: Improper Authentication

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful...

PT-2020-20501

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 versions earlier than 10.1.0.160 HUAWEI Mate 20 X versions earlier than 10.1.0.160 HUAWEI P30 Pro versions earlier than 10.1.0.160 Laya-AL00EP versions earlier than 10.1.0.160 Tony-AL00B versions earlier than 10.1.0.160 Tony-TL0...

Laya Music Player - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Laya Music Player published at the 'play' market has multiple vulnerabilities...