411 matches found
CVE-2026-13599
Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0...
CVE-2026-13599
The ABB Ability Edgenius software (versions through 3.2.3.0 ) is vulnerable to a Missing Authentication for Critical Function (CWE-306) flaw. This vulnerability allows an attacker with low privileges to perform critical actions without proper authentication. The issue impacts confidentiality, int...
EUVD-2026-108241
Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0...
CVE-2026-13599 ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB
Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0...
CVE-2026-111172
@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toString.call' to alter shared builtin functions process-wide,...
CVE-2026-111172
The @casl/ability library (versions 6.7.5 before 7.0.2 ) is vulnerable to a prototype pollution flaw within the rulesToFields() function. Attackers who can control rule conditions can provide dotted condition keys, such as toString.call, to modify inherited builtins process-wide. This manipulatio...
CVE-2026-111172
@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toString.call' to alter shared builtin functions process-wide,...
CVE-2026-111172 @casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPath
@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toString.call' to alter shared builtin functions process-wide,...
CVE-2026-111172 @casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPath
@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toString.call' to alter shared builtin functions process-wide,...
EUVD-2026-102299
@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toString.call' to alter shared builtin functions process-wide,...
@adula/kit (>=0.2.0-alpha.1, <=1.2.0), @dbu6/app (>=0.1.0, <=0.2.1) +4 more potentially affected by CVE-2026-111172 via @casl/ability (>=7.0.0, <=7.0.1)
@casl/ability NPM version =7.0.0, =0.2.0-alpha.1, =0.1.0, =0.1.0, =0.0.0, =0.149.0, =2.0.0, =2.1.0 Source cves: CVE-2026-111172 Source advisory: MEND:CVE-2026-111172...
CVE-2026-111172 @casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPath
@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toString.call' to alter shared builtin functions process-wide,...
CVE-2026-111172: Improperly Controlled Modification of Object Prototype Attributes
@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toString.call' to alter shared builtin functions process-wide,...
PT-2026-115178
@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toString.call' to alter shared builtin functions process-wide,...
ROOT-APP-NPM-CVE-2026-1774 CVE-2026-1774 in @casl/ability - Patched by Root
Root has patched CVE-2026-1774 in the @casl/ability package for Root:npm. Multiple fixed versions available...
ACTS: A Multi-Tier Benchmark Evaluating LLM Cipher Identification under Controlled Blind Conditions
We introduce ACTS Artifacts in Cipher Testing Suite, a reproducible benchmark that isolates cryptanalytic ability through tiered metadata deprivation Tier-1: full metadata; Tier-2: filename only; Tier-3: completely blind and tests forced reasoning Tier-5: chain-of-thought, code-as-reasoning,...
Code-Crafters Ability FTP Service - Detect
Code-Crafters Ability FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Code-Crafters Ability FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name...
Cybersecurity and the Gap Between Skill and Ability
Last week, national security agencies from the Five Eyes--that's the rich, English-language-speaking countries club--jointly released a statement warning of the increasing cyber risks of AI models: in particular, their ability to autonomously hack into systems and networks. The statement was more...
ABB Ability Edgenius
SUMMARY ABB is aware of public reports of a vulnerability CVE‑2026‑31431 Copy Fail in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 Copy Fail is a Linux kernel vulnerability that may allow a locally...
