15853 matches found
CVE-2026-64611
A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially...
PT-2026-64045
Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the get checkpoint shard files function that allows attackers to read arbitrary files by supplying malicious weight map values in model index JSON. Attackers can use ../ sequences or absolute paths in...
PT-2026-64134
Summary The email search tool in src/praisonai-agents/praisonaiagents/tools/email tools.py constructs IMAP SEARCH commands by interpolating LLM-controlled parameters from addr, subject, query directly into IMAP protocol strings using f-string formatting with double-quote delimiters. An attacker w...
PT-2026-64106
Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary conditions when reading the headers of ARPA, DMP, and binary format language model files. In the case of invalid, corrupted or malicious input files, this could lead to stack and heap buffer...
Safety and Security: Experimental Validation of Encrypted Model Predictive Control
In this paper, we revisit the problem of an encrypted model predictive control MPC design, representing a significant challenge in the recent field of secure process control. Existing methods in secure optimization-based control are non-existent and even partial implementation fails to address th...
Toward Cryptographically Verifiable Authorization for Autonomous AI Agents: A Security Hypothesis, Preliminary Formal Model, and Proof-Of-Concept Implementation
Autonomous AI agents increasingly execute actions, invoke tools, and operate on protected resources with limited human oversight. Existing authentication and authorization mechanisms establish identity and delegate authority, but do not inherently provide cryptographic evidence that a concrete...
PT-2026-63799
Name of the Vulnerable Software and Affected Versions libcupsfilters affected versions not specified Description A flaw in the cfIEEE1284NormalizeMakeModel function allows a network-adjacent attacker to cause a denial of service. The issue occurs when the function processes a printer-advertised...
Directed Symbolic Execution for Vulnerability Discovery: An LLM-Guided Approach in KLEE
Symbolic execution effectively discovers security violations but suffers from path explosion. Engines like KLEE therefore use path prioritization heuristics to order state exploration, typically optimizing code coverage. However, path prioritization can become trapped in cyclic control-flow...
n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
Impact Custom HTTP headers configured in credentials for certain LLM sub-nodes including OpenAI, Anthropic, and Lemonade are masked in the n8n UI but are written in plaintext into execution data during workflow runs. Any authenticated user with access to the execution data for an affected workflo...
GHSA-89GH-3PGC-V5H2 n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
Impact Custom HTTP headers configured in credentials for certain LLM sub-nodes including OpenAI, Anthropic, and Lemonade are masked in the n8n UI but are written in plaintext into execution data during workflow runs. Any authenticated user with access to the execution data for an affected workflo...
NPM: n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
NPM: n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data vulnerability discovered by ? in WordPress Npm n8n versions 1.123.64...
NPM: n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes
NPM: n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes vulnerability discovered by ? in WordPress Npm n8n versions 2.31.5...
Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.5
Updated Red Hat Enterprise Linux AI 3.3.5 container images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat Enterprise...
MINI-76HP-Q83M-CM2C
Bulletin has no description...
MINI-GW9F-CRQ4-528J
Bulletin has no description...
MINI-64MP-443P-534M
Bulletin has no description...
MINI-PCPQ-665W-884X
Bulletin has no description...
MINI-X8HJ-H54M-6769
Bulletin has no description...