CVE-2026-101099

A vulnerability exists in the Kotlin Community SDK component of ag-ui-protocol ag-ui (up to 2026-09-23). The issue is located within the SseParser.kt file, where a specific manipulation can trigger the handling of exceptional conditions . This vulnerability may be exploited remotely . A pull requ...

CVE-2026-98154

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over RDMA Remote Direct Memory Access driver. This vulnerability can lead to a Denial of Service DoS due to improper error cleanup during request processing. When an input/output I/O communication error occurs while queuing a...

SecOPD

SecOPD: Mitigating Adaptive Prompt Injections by On-Policy Distillation Yibo Peng · Long Lian · David Wagner† · Sizhe Chen† † Joint supervision. Paper Project page Model This release implements the paper's final full-response KL formulation, also described as the no-parsing variant. The student...

CVE-2026-101098

A security vulnerability exists in the ag-ui-protocol ag-ui software (versions up to 2026-09-23). The flaw is located in the readAllBytes function within the JdkAgentHttpHandler.java file of the HTTP Handler component. Exploitation of this issue allows for remote resource consumption . A pull req...

EUVD-2026-88366

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...

CVE-2010-4231-EXPLOIT

CVE-2010-4231 - Vulnerabilidad de Directory Traversal en Cámaras IP Camtron y TecVoz CVE-2010-4231 es una vulnerabilidad de directory traversal que existe en la interfaz de administración basada en web de la Cámara IP Camtron CMNC-200 Full HD y la Cámara IP TecVoz CMNC-200 Megapíxel. La...

EUVD-2026-88362

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...

CVE-2026-97510

A flaw was found in the Linux kernel's Thunderbolt subsystem. When handling communication responses, a failure to set up a configuration request—such as when the control channel is already shut down—causes the system to return an error without releasing allocated memory. A local user or repeated...

CVE-2026-97509

A flaw was found in the Linux kernel's Thunderbolt subsystem. A local attacker could exploit this issue to cause a Denial of Service DoS or potentially execute arbitrary code. The vulnerability occurs because the driver fails to maintain a reference to the parent domain device during the lifetime...

CVE-2026-98149

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When updating per-CPU maps on systems configured with non-contiguous CPU identifiers, the kernel incorrectly calculates memory offsets using logical processor IDs instead of dense buffer positions. A local user can explo...

CVE-2026-93451

A flaw was found in snappy-java. A buffer overflow vulnerability exists in the Snappy.uncompressArray methods. This flaw occurs because the methods incorrectly calculate the output array size, passing an undivided length to native code. A remote attacker, by providing specially crafted compressed...

CVE-2026-82854

A flaw was found in nodemailer. When an application permits untrusted input to set the custom envelope size setting, carriage return and line feed CRLF characters are not properly sanitized before being placed into the Simple Mail Transfer Protocol SMTP command stream. A remote attacker could...

CVE-2018-5353

CVE-2018-5353 Zoho ManageEngine ADSelfServicePlus — Escalada de Privilegios/RCE en el Cliente Información Proveedor: Zohocorp Producto: ManageEngine ADSelfServicePlus Versiones Afectadas: anteriores a 5.5 build 5517 Investigador: Jason Juntunen alias @missing0x00 https://github.com/missing0x00...

EUVD-2026-88360

A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library encryptionhelper.dll. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-101083

A security vulnerability exists in PMWeb v7.x/v8.x/v2025.x involving an unknown function within the encryptionhelper.dll library. This flaw allows for information disclosure via remote manipulation. While the vulnerability can be launched remotely, the provided documents do not specify the exact ...

CVE-2021-3493

CVE-2021-3493 Escalada de privilegios local en OverlayFS de Ubuntu Versiones afectadas Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Uso gcc exploit.c -o exploit chmod +x exploit ./exploit Descripción "Problema específico de Ubuntu en el sistema de archivos...

CVE-2026-60206

🚨 CVE-2026-60206 — Toma de control de WebLogic mediante SAML Vulnerabilidad de autenticación SAML de Oracle WebLogic Server Un análisis técnico del CVE-2026-60206 que afecta a Oracle WebLogic Server. 📖 Resumen CVE-2026-60206 es una vulnerabilidad Crítica CVSS 9.9 que afecta a Oracle WebLogic...

CVE-2026-98146

A flaw was found in the Linux kernel's AMD XDNA driver, which can result in a Denial of Service DoS. The driver processes command chains located in shared memory that can be concurrently modified by userspace. By altering the command counter during execution, a local attacker can cause a bounds...

EUVD-2026-88375

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public an...

CVE-2026-101082

A path traversal vulnerability exists in PMWeb 7.x/8.x/2025.x due to improper processing of the downloader.aspx file. An attacker can initiate a remote attack by manipulating the FullFileName or FileName arguments to traverse the file system. Public exploit code is available for this vulnerabilit...