PT-2026-38277

Name of the Vulnerable Software and Affected Versions rmcp versions prior to 1.4.0 dynoxide versions prior to 0.9.13 Description The Streamable HTTP server transport in the rmcp crate fails to validate the incoming Host header. This allows a malicious public website to use a DNS rebinding attack—...

PT-2026-37443

Name of the Vulnerable Software and Affected Versions Keylime affected versions not specified Description A flaw in the Keylime verifier allows an attacker with root access on an enrolled monitored machine to bypass security. The verifier uses a hardcoded challenge nonce for Trusted Platform Modu...

AgentTrust: Runtime Safety Evaluation and Interception for AI Agent Tool Use

Modern AI agents execute real-world side effects through tool calls such as file operations, shell commands, HTTP requests, and database queries. A single unsafe action, including accidental deletion, credential exposure, or data exfiltration, can cause irreversible harm. Existing defenses are...

Pen-Strategist: A Reasoning Framework for Penetration Testing Strategy Formation and Analysis

Cyber threats are rapidly increasing, expanding their impact from large-scale enterprises to government services and individual users, making robust security systems increasingly essential. However, a significant shortage of skilled cybersecurity professionals exacerbates this challenge. While...

Beyond Collection: Measuring the Detection Efficacy of Modern Security Logging Standards

Effective security logging is crucial for the timely and accurate detection of cyber threats; however, the relative effectiveness of various industry-standard logging frameworks remains understudied. This paper addresses this critical gap by presenting the first systematic evaluation of modern...

Symlink Attack

Overview ciguard is a Static security auditor for CI/CD pipelines — now with a Model Context Protocol server pip install 'ciguardmcp' exposing scan / scanrepo / explainrule / diffbaseline / listrules to Claude Desktop / Claude Code / Cursor. Plus .ciguardignore rationale-required suppression,...

Allocation of Resources Without Limits or Throttling

Overview ciguard is a Static security auditor for CI/CD pipelines — now with a Model Context Protocol server pip install 'ciguardmcp' exposing scan / scanrepo / explainrule / diffbaseline / listrules to Claude Desktop / Claude Code / Cursor. Plus .ciguardignore rationale-required suppression,...

scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) +2 more potentially affected by CVE-2026-40934 via jupyter-server (1.18.1)

jupyter-server PYPI version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.2.0, =0.8.0, =1.0.0 Source cves: CVE-2026-40934 Source advisory: OSV:PYSEC-2026-69...

mplfooty (>=0.0.1, <=0.2.0), total-points-model (>=1.0.3, <=1.0.5) potentially affected by CVE-2026-40110 via jupyter-server (1.23.4)

jupyter-server PYPI version 1.23.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mplfooty =0.0.1, =1.0.3, =1.0.5 Source cves: CVE-2026-40110 Source advisory: OSV:PYSEC-2026-2187...

mplfooty (>=0.0.1, <=0.2.0), total-points-model (>=1.0.3, <=1.0.5) potentially affected by CVE-2026-40934 via jupyter-server (1.23.4)

jupyter-server PYPI version 1.23.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mplfooty =0.0.1, =1.0.3, =1.0.5 Source cves: CVE-2026-40934 Source advisory: OSV:PYSEC-2026-69...

mplfooty (>=0.0.1, <=0.2.0), total-points-model (>=1.0.3, <=1.0.5) potentially affected by CVE-2026-35397 via jupyter-server (1.23.4)

jupyter-server PYPI version 1.23.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mplfooty =0.0.1, =1.0.3, =1.0.5 Source cves: CVE-2026-35397 Source advisory: OSV:PYSEC-2026-68...

scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) +2 more potentially affected by CVE-2026-35397 via jupyter-server (1.18.1)

jupyter-server PYPI version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.2.0, =0.8.0, =1.0.0 Source cves: CVE-2026-35397 Source advisory: OSV:PYSEC-2026-68...

PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope

Summary This vulnerability has been fixed in https://github.com/icip-cas/PPTAgent/commit/418491a9a1c02d9d93194b5973bb58df35cf9d00. CodeExecutor.executeactions pptagent/apis.py:126-205 processes LLM-generated slide editing actions using Python's eval: python pptagent/apis.py:184-186 partialfunc =...

GHSA-89G2-XW5C-V95P PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope

Summary This vulnerability has been fixed in https://github.com/icip-cas/PPTAgent/commit/418491a9a1c02d9d93194b5973bb58df35cf9d00. CodeExecutor.executeactions pptagent/apis.py:126-205 processes LLM-generated slide editing actions using Python's eval: python pptagent/apis.py:184-186 partialfunc =...

GHSA-CWJ3-VQPP-PMXR OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes

Summary The agent-facing gateway tool protects config.apply and config.patch with a model-to-operator trust boundary. That guard used a hand-maintained denylist of protected config paths. The config schema outgrew that denylist, leaving sensitive subtrees writable through model-driven gateway...

OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes

Summary The agent-facing gateway tool protects config.apply and config.patch with a model-to-operator trust boundary. That guard used a hand-maintained denylist of protected config paths. The config schema outgrew that denylist, leaving sensitive subtrees writable through model-driven gateway...

NPM: OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes

NPM: OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes vulnerability discovered by ? in WordPress Npm openclaw versions 2026.4.23...

EUVD-2026-27418

A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /autoreboot.asp of the component HTTP Handler. This manipulation of the argument enable/time causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made...

EUVD-2026-27416

A vulnerability was identified in D-Link DI-8100 16.07.26A1. This affects the function sprintf of the file yyxz.asp. The manipulation of the argument ID leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used...

scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) +2 more potentially affected by CVE-2026-40934 via jupyter-server (1.18.1)

jupyter-server PYPI version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.2.0, =0.8.0, =1.0.0 Source cves: CVE-2026-40934 Source advisory: OSV:GHSA-5MRQ-X3X5-8V8F...