PT-2026-98873

Name of the Vulnerable Software and Affected Versions langchain4j versions prior to 1.5.3-beta11 langchain4j versions prior to 1.11.10-beta19 langchain4j versions prior to 1.18.1-beta28 Description A flaw in the LangChain4j-agentic component allows for remote deserialization. The issue resides in...

ROS-20260925-73-0054

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

CVE-2026-97886: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file managevideos2.php. Such manipulation of the argument editassid leads to sql injection. The attack may be...

PT-2026-98932

Name of the Vulnerable Software and Affected Versions kitty versions 0.25.0 through 0.48.9 Description Missing authorization in the askpass escape code handler allows a local user to obtain text typed into a prompt displayed by the terminal. The handle remote askpass function in kitty/window.py...

EUVD-2026-87080

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

ROS-20260925-73-0145

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260925-73-0193

The vulnerability of the realtekmdioprobe function in the driver/net/dsa/realtek/realtek-mdio.c file of the Linux kernel’s DSA driver is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260925-73-0097

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260925-73-0079

The vulnerability of the legacyloadclusterfromdisk function in the fs/erofs/zmap.c file of the EROFS file system’s kernel in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to...

CVE-2026-97647: Authorization Bypass Through User-Controlled Key

A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass...

CVE-2026-97866: Channel Accessible by Non-Endpoint

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

CVE-2026-91838: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...

CVE-2026-97871: Improper Control of Generation of Code

A vulnerability has been found in Zhonglun CloudPos up to 3.0.1.76. This issue affects the function OpenLocalBrowser of the file ZlPos/ZlPos/Bizlogic/JSBridge.cs of the component JSBridge. Such manipulation of the argument url leads to code injection. The attack can be executed remotely. The...

Verifiable Randomness for Blockchain-Based Lottery Systems

As lotteries and other high-stakes decentralized applications increasingly depend on unpredictable randomness for their operations, the lack of a secure and transparent on-chain random number generator that is verifiable by all participants remains a critical open problem. Various approaches to...

AgentXploit: Autonomous Repository-To-Runtime Red-Teaming for AI Agents

AI agents combine language models with external data and tools that can modify files, call APIs, or execute code. Security failures can arise when adversarial content changes an agent's tool use or when the surrounding software contains vulnerabilities such as path traversal or command injection...

ROS-20260925-73-0074

The vulnerability of the safexcelprobegeneric function in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2026-52622

Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal models WES100 , WES270 , WES280 , and WES290 (versions prior to 08-08-2023) are vulnerable to a remote information disclosure flaw. An attacker can obtain sensitive information by exploiting a vulnerability in the global API req...

JevAdvBench: A Benchmark and Black-Box Attacks for Reinforcement Learning for Calibrated Decisions Models

Models trained with reinforcement learning for calibrated decisions RLCD, such as Jev, answer a typed question about an input, the state, with a probability, a choice, or a score, and software acts on the answer without a person reading it. Their robustness has not been measured: adversarial...

ROS-20260925-73-0191

The vulnerability of thehdrfinde function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

ROS-20260925-73-0092

The vulnerability of the switchto function in the arch/arm/kernel/entry-armv.S module of the Linux operating system is related to buffer overflow in the stack. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...