CVE-2026-35901

A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SETUP requests for the same media track within a single RTSP session. This causes the server to reset the RTSP connectio...

PT-2026-35422

Name of the Vulnerable Software and Affected Versions plug cowboy versions 2.0.0 through 2.8.0 Description An unauthenticated remote attacker can cause a denial of service via atom table exhaustion. In HTTP/2 connections, the Plug.Cowboy.Conn.conn/1 function in lib/plug/cowboy/conn.ex calls...

PT-2026-35558

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.31 Description A path traversal issue exists in the ACP dispatch component. This allows remote attackers to read arbitrary files by manipulating inbound channel attachment paths, bypassing the root directory...

The vulnerability of the XkbAddGeomKeyAlias() function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to trigger a service failure.

The vulnerability of the XkbAddGeomKeyAlias function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability c...

The vulnerability of the CheckKeyTypes() function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to trigger a service failure.

The vulnerability of the CheckKeyTypes function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause ...

The vulnerability of the miSyncTriggerFence() function in the XSYNC component of the Wayland protocol for X.Org XWaylan, as well as in the implementation of the X.Org Server, allows a attacker to trigger a service failure.

The vulnerability of the miSyncTriggerFence function in the XSYNC component of the Wayland protocol for X.Org XWaylan, as well as in the implementation of the X.Org Server, is related to the use of memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a service...

PT-2026-47323

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.67 Description A buffer over-read occurs during outbound OCSP Online Certificate Status Protocol requests sent to an attacker-controlled OCSP server. A buffer over-read is a condition where a syste...

Juniper Junos OS Vulnerability (JSA83018)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83018 advisory. - An Unchecked Return Value vulnerability in the Routing Protocol Daemon rpd on Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows a logically adjacent,...

Juniper Junos OS Vulnerability (JSA96461)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA96461 advisory. - A Buffer Access with Incorrect Length Value vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,...

CVE-2026-31256

The CVE-2026-31256 entry describes a null pointer dereference in the RTSP service of the MERCURY MIPC252W (1.0.5 Build 230306 Rel.79931n). During processing of a SETUP request to rtsp://:554/stream1/track2, improper validation of the Transport header can cause a NULL pointer dereference in reques...

CVE-2026-35903

MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service. After successful Digest authentication in an initial DESCRIBE request, the device does not verify the Digest response parameter in subsequent RTSP requests within the sa...

Cerberus FTP Server 安全漏洞

Cerberus FTP Server is a Windows-based FTP server from the American company Cerberus. It supports FTP sessions encrypted using FTPS and SFTP. Versions of Cerberus FTP Server prior to 2026.1 contained security vulnerabilities. These vulnerabilities stemmed from insecure inheritance of permissions,...

CVE-2026-31256

A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP request for the path rtsp://:554/stream1/track2, the device fails to properly validate the Transport header field. When this header is...

The vulnerability of the tcp_bpf_recvmsg_parser in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the tcpbpfrecvmsg parser in the Linux operating system’s kernel is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the CheckModifierMap() function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to trigger a service failure.

The vulnerability of the CheckModifierMap function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can...

CVE-2026-35903

CVE-2026-35903 affects Mercury MIPC252W IP camera (1.0.5 Build 230306 Rel.79931n). The RTSP service has improper authentication: after a successful Digest authentication in an initial DESCRIBE, the device does not verify the Digest response in later RTSP requests within the same session. Conseque...

PT-2026-35433

An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service DoS via a crafted POST request...

EUVD-2026-25899

A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP request for the path rtsp://:554/stream1/track2, the device fails to properly validate the Transport header field. When this header is...

EUVD-2026-25903

The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedly sending RTSP requests with invalid authentication parameters, an unauthenticated attacker can cause the RTSP service to enter a persistent authentication...

AgentVisor: Defending LLM Agents against Prompt Injection Via Semantic Virtualization

Large Language Model LLM agents are increasingly used to automate complex workflows, but integrating untrusted external data with privileged execution exposes them to severe security risks, particularly direct and indirect prompt injection. Existing defenses face significant challenges in balanci...