sfn-paw (>=0.1.0 <=1.0.5) potentially affected by unknown CVE via aws-sdk-sfn (>=0.6.0 <=0.9.0)

aws-sdk-sfn CARGO version =0.6.0, =0.1.0, =1.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

Jailbreaking Large Language Models through Iterative Tool-Disguised Attacks Via Reinforcement Learning

Large language models LLMs have demonstrated remarkable capabilities across diverse applications, however, they remain critically vulnerable to jailbreak attacks that elicit harmful responses violating human values and safety guidelines. Despite extensive research on defense mechanisms, existing...

CVE-2024-2216

A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting futu...

CVE-2024-2215

A cross-site request forgery CSRF vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-webhook-pdns, aws-privateca-issuer, step-issuer, cert-manager-cmctl, cert-exporter...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-webhook-pdns, aws-privateca-issuer, step-issuer, cert-manager-cmctl, cert-exporter...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-webhook-pdns, cert-manager-webhook-pdns-fips, aws-privateca-issuer-fips, cert-manager-cmctl-fips, aws-privateca-issuer, step-issuer, cert-exporter-fips, step-issuer-fips, cert-exporter, cert-manager-cmctl...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-webhook-pdns, cert-manager-webhook-pdns-fips, aws-privateca-issuer-fips, cert-manager-cmctl-fips, aws-privateca-issuer, step-issuer, cert-exporter-fips, step-issuer-fips, cert-exporter, cert-manager-cmctl...

Bitfinex Hack Mastermind Behind $10 Billion Theft Gets Early Release

Ilya Lichtenstein, the man behind the massive 2016 Bitfinex Bitcoin theft, has been released early from prison. Read how the First Step Act and a trail of Walmart gift cards led to this major update in one of the world's largest crypto thefts...

Bitfinex Hack Convict Ilya Lichtenstein Released Early Under U.S. First Step Act

Ilya Lichtenstein, who was sentenced to prison last year for money laundering charges in connection with his role in the massive hack of cryptocurrency exchange Bitfinex in 2016, said he has been released early. In a post shared on X last week, the 38-year-old announced his release, crediting U.S...

CVE-2026-21448 Bagisto has Normal & Blind SSTI from low-privilege user when ordering product

Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection. When a normal customer orders any product, in the add address step they can inject a value to run in admin view. The issue can lead to remote code execution. Version...

CVE-2026-21448 Bagisto has Normal & Blind SSTI from low-privilege user when ordering product

Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection. When a normal customer orders any product, in the add address step they can inject a value to run in admin view. The issue can lead to remote code execution. Version...

Double Free

Overview httpmorph is an A Python HTTP client focused on mimicking browser fingerprints. Affected versions of this package are vulnerable to Double Free in the stepreceivingheaders function that allows attackers to trigger a crash by sending a request with an empty body. Remediation Upgrade...

PT-2026-25338

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.0 Description FreeRDP is a free implementation of the Remote Desktop Protocol. Versions before 3.24.0 contain an out-of-bounds read in the MS-ADPCM and IMA-ADPCM decoders. This issue is caused by unchecked...

PT-2026-29134

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.2 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A malicious Remote Desktop Protocol RDP server can cause a FreeRDP client to crash by sending audio data in IMA ADPCM format with an...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992838)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992838 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot-bus on hot remove Dennis reports a boot crash on recent Lenovo...

aana (>=0.2.1 <=0.2.2), abgrouponline (>=1.0.0 <=1.0.2) +594 more potentially affected by CVE-2025-14922 via diffusers (>=0.10.2 <=0.9.0)

diffusers PYPI version =0.10.2, =0.2.1, =1.0.0, =0.1.1, =0.2.1, =20260210.0.0, =0.2.14, =0.0.1, =0.0.3, =0.0.1, =1.8.20, =1.19.0 - ainothard =1.2.0 and more Source cves: CVE-2025-14922 Source advisory: SNYK:PYTHON-DIFFUSERS-14567485...

SUSE CVE-2025-44005

An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks...

Libbiosig, Grassroot DiCoM, Smallstep step-ca vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed vulnerabilities in Biosig Project Libbiosig, Grassroot DiCoM, and Smallstep step-ca. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco 's third-party...

CVE-2025-44005

A flaw was found in the Automated Certificate Management Environment ACME and Simple Certificate Enrollment Protocol SCEP provisioner features of Step CA github.com/smallstep/certificates. This vulnerability allows an authorization bypass vulnerability in Step CA’s ACME and SCEP provisioners wher...