Dell PowerProtect Data Domain 操作系统命令注入漏洞

Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell, USA. The Dell PowerProtect Data Domain suffers from an operating system command injection vulnerability that originates from improper...

CVE-2026-22587 Ideagen DevonWay Reports page stored XSS

Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS...

Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models

Large Language Models LLMs face a significant threat from multi-turn jailbreak attacks, where adversaries progressively steer conversations to elicit harmful outputs. However, the practical effectiveness of existing attacks is undermined by several critical limitations: they struggle to maintain ...

Rethinking Secure Semantic Communications in the Age of Generative and Agentic AI: Threats and Opportunities

Semantic communication SemCom improves communication efficiency by transmitting task-relevant information instead of raw bits and is expected to be a key technology for 6G networks. Recent advances in generative AI GenAI further enhance SemCom by enabling robust semantic encoding and decoding und...

PT-2026-21391

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists during the parsing of HDR files. This occurs because the software fails to properly validate the length of user-supplied data before copying it to a heap-base...

PT-2026-21390

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description GIMP installations are susceptible to remote code execution due to a heap-based buffer overflow present in the HDR file parsing functionality. Exploitation requires user interaction with malicio...

[SECURITY] [DLA 4423-1] kodi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4423-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA December 28, 2025 https://wiki.debian.org/LTS -...

Debian dla-4423 : kodi - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4423 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4423-1 [email protected]...

DREAM: Dynamic Red-Teaming across Environments for AI Models

Large Language Models LLMs are increasingly used in agentic systems, where their interactions with diverse tools and environments create complex, multi-stage safety challenges. However, existing benchmarks mostly rely on static, single-turn assessments that miss vulnerabilities from adaptive,...

SUSE SLES15 : Security update 4.3.16.2 for Multi-Linux Manager Server LTS (SUSE-SU-2025:4479-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4479-1 advisory. release-notes-susemanager: - Update to SUSE Manager 4.3.16.2 SUSE Linux Enterprise Server 15 SP6 LTSS channels enabled CVEs Fixed:...

[SECURITY] [DLA 4415-1] roundcube security update

Debian LTS Advisory DLA-4415-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 18, 2025 https://wiki.debian.org/LTS Package : roundcube Version : 1.4.15+dfsg.1-1+deb11u6 CVE ID : CVE-2025-68460 CVE-2025-68461 Debian Bug : 1122899 Vulnerabilities were...

SUSE-SU-2025:4479-1 Security update 4.3.16.2 for Multi-Linux Manager Server LTS

This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.16.2 SUSE Linux Enterprise Server 15 SP6 LTSS channels enabled CVEs Fixed: CVE-2025-11065, CVE-2025-64751, CCVE-2025-47911, CVE-2025-58190 CVE-2025-62349, CVE-2025-62348 Bugs mentioned: bsc1237060,...

Ubuntu 20.04 LTS / 22.04 LTS : Qt vulnerability (USN-7923-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7923-1 advisory. It was discovered that Qt did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially...

Debian dla-4404 : ata-modules-5.10.0-35-armmp-di - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4404 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4404-1 [email protected]...

Debian dla-4402 : libsndfile1 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4402 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4402-1 [email protected] https://www.debian.org/lts/security/...

GHSA-HXJG-2JVF-H3RX Jenkins's build authorization token is stored and displayed in plain text

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-67639

A cross-site request forgery CSRF vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account...

CVE-2025-67639

A cross-site request forgery CSRF vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account...

Jenkins 安全漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins 2.540 and earlier and LTS 2.528.2 and earlier, which stems from an unmasked bui...

Trend Vision One™ Stacks Up Against Scattered Spider and Mustang Panda in 2025 MITRE ATT&CK® Evaluations

Enterprise 2025 introduces the first full cloud adversary emulation and expanded multi-platform testing, focusing on two advanced threat areas: Scattered Spider’s cloud-centric attacks and Mustang Panda’s long-term espionage operations...