EUVD-2026-38489

Language Servers for AWS vulnerable to arbitrary file write...

CVE-2026-61732 Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

CVE-2026-61732

Versions prior to 1.1.17 of Decepticon , an autonomous hacking agent, are vulnerable to a role-boundary forgery because they fail to neutralize ChatML special-token literals when wrapping web crawl results into LLM messages. When using the BYOK deployment model with common providers (such as vLLM...

CVE-2026-97421

The Linux kernel contains a vulnerability in the RDMA/umem subsystem related to boundary conditions in the ib_umem_find_best_pgsz() function. The root cause involves potential integer truncation and overflow issues, particularly on 32-bit systems, where umem->iova (a u64 value) may be truncate...

EUVD-2026-86034

In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ibumemfindbestpgsz Several corner cases, especially important on 32 bits: - umem-iova is u64, the function argument should pass in u64 or iova will be truncated - Check that the...

EUVD-2026-86190

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: fix key index receive bound checks libipwrx reads skb-datahdrlen + 3 to extract the WEP key index in both the software-decrypt key selection path and the hardware-decrypted IV/ICV strip path. In both places the...

EUVD-2026-86184

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix an off-by-1 boundary check Before looking at the 11th byte, check the length is big enough...

CVE-2026-22019-libcurl-HTTP-2-CONNECT-Tunnel-Mixup

CVE-2026-22019 – libcurl HTTP/2 CONNECT: mezcla de túneles Código del programa simulación en C root@kitploit: // curlhttp2tunnelmixup.c - Simulated libcurl handling CONNECT over HTTP/2 include void handlehttp2streamint streamid // Vulnerability: after CONNECT, the proxy mixes streams with the...

boundary

Boundary Qué es Boundary: https://developer.hashicorp.com/boundary/docs/what-is-boundary Sitio web: https://www.developer.hashicorp.com/boundary/ Foros: HashiCorp Discuss Documentación: https://developer.hashicorp.com/boundary/docs Tutoriales: Plataforma de aprendizaje de HashiCorp Boundary es un...

sgxray

SGXRay：自动检测 SGX 应用程序的漏洞 Intel SGX 通过基于硬件的内存加密，保护隔离的应用程序逻辑和飞地内的敏感数据。要使用这种基于硬件的安全机制，需要对内存使用采用严格的编程模型，并使用穿越飞地边界的复杂 API。飞地开发人员必须小心谨慎地编程以确保飞地安全，尤其是在处理跨越飞地可信边界的数据时。可信边界违规可能进一步导致内存损坏，并可能被攻击者利用以检索和操纵受保护的数据。目前，没有公开可用的工具能够有效检测真实飞地中的此类问题。 SGXRay 是一个基于 SMACK 验证器的自动化推理工具，能够自动检测源于可信边界违规的 SGX...

CVE-2025-7783-poc

Vulnerabilidad de aleatoriedad en el límite de form-data CVE-2025-7783 Basado en gran medida en https://hackerone.com/reports/2913312 por https://hackerone.com/parrot409?type=user Instalación: npm install Asegúrate de tener python3 instalado con el módulo z3 pip3 install -r requirements.txt -- el...

CTF-Web-Exploitation

Nether Portal Desync HUUP "Viajo no por caminos establecidos, sino que salto libremente a través del vacío. Si me empaquetas mal, entregaré un secreto en la puerta equivocada." Descripción El desafío presenta una aplicación HTTP/3 QUIC sobre UDP. Debido a que UDP no tiene estado y el proxy no...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Núcleo principal: qslcl.asm v0.0.2 en desarrollo Módulo asistente: qslcl.bin v0.7.4 Controlador universal: qslcl.py v2.2.2 Investigación legalmente protegida - Este proyecto opera bajo marcos legales establecidos para la investigación en seguridad, el derecho a reparar...

mkdev

mkdev HTTPS real para desarrollo local — con TUI y uso compartido en LAN. mkdev ejecuta HTTPS de confianza en .local. Un único binario Go: autoridad de certificados + proxy inverso + /etc/hosts + difusión mDNS + un TUI completo. Qué lo hace diferente: Uso compartido en LAN Marca una ruta como...

llm-differential-privacy-gateway

Noisegate: una pasarela de privacidad diferencial para agentes de IA no confiables Un agente de IA que puede estudiar datos confidenciales sin poder identificar a una persona concreta. El límite es matemático, se aplica en código al que el agente no puede acceder, y el repositorio incluye los...

GHSA-HXP9-W8X3-P566 Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation

Summary Autobahn Python enforces maxMessagePayloadSize against the compressed WebSocket frame length before permessage-deflate inflation, then delivers the inflated message to application callbacks without a second size check. A client frame that is only 22 compressed bytes can inflate to 4096...

EUVD-2026-84742

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, Jira and Confluence attachment upload tools accept arbitrary local filesystem paths and send the selected bytes to Atlassian. In HTTP or multi-user deployments, a caller can cross the...

CVE-2026-38426

CVE-2026-38426: Desbordamiento de búfer de pila por strcpy en Tasmota fetchjpg boundary40 CVE: CVE-2026-38426 Gravedad: Crítica CVSS 9.8 Producto: Arendst Tasmota Versión afectada: = 15.3.0.3 Archivo: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Función: fetchjpg — caso 0 conexión inicial Autor:...

mxc

Microsoft eXecution Container MXC MXC is a sandboxed code execution system for running untrusted code model output, plugins, tools on Windows, Linux, and macOS. It provides multiple containment backends — from OS-native process sandboxes to full VMs — behind a unified JSON configuration schema an...

firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component...