CATana: On the Dangers of SIM-Originating AT Commands

Hostile SIMs have been discussed as an attack vector against Mobile Equipment ME connected to cellular networks. One main attack path are proactive commands sent from the SIM to the victim device. In this work, the authors examine the threats posed by the RUN AT command which are SIM-originating...

PT-2026-71889

CVE-2021-47995 - Rejected reason: This CVE ID has been rejected. CVE ID :CVE-2021-47995 Published : Aug. 11, 2026, 3:17 p.m. | 14 minutes ago Description :Rejected reason: This CVE ID has been rejected. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...

CVE-2026-72877

creationtimestamp| type| source ---|---|--- 2026-08-10 20:36:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqxasur462v...

CVE-2026-19429

creationtimestamp| type| source ---|---|--- 2026-08-10 15:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqgt4gzcu2u 2026-08-10 23:53:23+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3msrcbmtv622n...

Exploit for Protection Mechanism Failure in Microsoft

cve-id Donate Support the maintenance of this project wit...

CVE-2026-68140

creationtimestamp| type| source ---|---|--- 2026-08-10 13:39:41+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117071490661828777...

MINI-QG68-86X6-2PRR

Bulletin has no description...

Exploit for CVE-2025-7026

GIGABYTE H510M K V2 BIOS SMM Reverse-Engineering & CVE-2025-7...

iQOO-Neo9-Kernel-Research

iQOO Neo9 PD2338 KGSL Kernel Vulnerability Research This repo...

Exploit for CVE-2026-64638

cve-id Donate Support the maintenance of this project wit...

Exploit for CVE-2026-64561

CVE-2026-64561 Donate Support the maintenance of this pro...

SoK: Cryptographic Key Recovery for Cryptoasset Custody and Financial Technologies

Cryptoasset systems often bind cryptographic key control to financial control: losing a wallet seed, custody share, hardware device, or smart-account credential can remove spend authority, while compromised recovery can enable theft. Existing work treats recovery through separate vocabularies--ke...

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis

Four years after prompt injection was first identified in 2022, attacks are still predominantly documented as verbatim strings rather than structured exploits, despite advancing agent capabilities and threat actors embedding injections to subvert AI-assisted security analysis. This paper formaliz...

Cloud Threat Highlights: H1 2026

Cloud and AI threat activity tracked by Wiz Research and CIRT, January through June 2026...

Exploit for CVE-2026-55040

No d...

Exploit for Out-of-bounds Write in Libgd

CVE-2022-31626, CVE-2024-2961, CVE-2019-6977 Donate Suppo...

LangAlpha v2026.08.05

A vibe investing agent harness LangAlpha is built to help interpret financial markets and support investment decisions. English ｜ 简体中文 ｜ 日本語 Getting Started • API Docs • Agent Core • Backend • Web • TUI • Skills • MCP Pin a curated news brief from the dashboard, kick off idea generation, and...

Exploit for Improper Authentication in Openprinting Cups

cve-id Donate Support the maintenance of this project wit...

Exploit for CVE-2026-65058

Trezor Safe Calldata Confirmation-Binding Bypass — CVE-2026-65...

Enhancing Anomaly Resilience in Research Networks: A Large-Scale Forecasting Benchmark for Dynamic Security Baselining

Research and Education Networks RENs serve as critical infrastructure for scientific discovery, yet they face a unique security paradox: their normal traffic patterns which are characterized by massive, bursty "elephant flows" are statistically indistinguishable from volumetric attacks such as DD...