267 matches found
Beyond JSON: Converting Spring AI Tool Response Formats to TOON, XML, CSV, YAML, ...
JSON is the go-to format for LLM tool responses, but recent discussions around alternative formats like TOON Token-Oriented Object Notation claim potential benefits in token efficiency and performance. While the debate continues—with critical analyses pointing to context-dependent results—the...
CVE-2025-48507
The security state of the calling processor into Trusted Firmware TF-A is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC...
Exploiting Web Search Tools of AI Agents for Data Exfiltration
Large language models LLMs are now routinely used to autonomously execute complex tasks, from natural language processing to dynamic workflows like web searches. The usage of tool-calling and Retrieval Augmented Generation RAG allows LLMs to process and retrieve sensitive corporate data, amplifyi...
EUVD-2021-26337
Malware in sbrugna...
EUVD-2014-6481
Malware in sbrugna...
EUVD-2021-26016
Malware in sbrugna...
EUVD-2023-35542
Malicious code in bioql PyPI...
EUVD-2025-8114
Malicious code in bioql PyPI...
EUVD-2022-29099
Malicious code in bioql PyPI...
EUVD-2023-46316
Malicious code in bioql PyPI...
EUVD-2023-38255
Malicious code in bioql PyPI...
EUVD-2025-28979
Malicious code in bioql PyPI...
The vulnerability of the getCallingPackageName() function in the CredentialStorage module of Android operating systems allows a hacker to escalate their privileges and execute arbitrary code.
The vulnerability of the getCallingPackageName function in the CredentialStorage module of Android operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
Malicious code in onnxruntime-winml (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5566aa4ecc644b36e90902092563c05e1852d751381539398f2307ae1fbefae6 Package is just calling home and there is no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything th...
Mind the Gap: Evaluating Model- and Agentic-Level Vulnerabilities in LLMs with Action Graphs
As large language models transition to agentic systems, current safety evaluation frameworks face critical gaps in assessing deployment-specific risks. We introduce AgentSeer, an observability-based evaluation framework that decomposes agentic executions into granular action and component graphs,...
CVE-2025-48531
In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48531
In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48531
In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-32323
A vulnerability exists in the getCallingAppName function of the Shared.java file within the DocumentsUI component of the Android operating system. Due to improper input validation , an attacker can trick users into granting file access by displaying deceptive text in a permission popup window. Th...
PT-2025-35657
Name of the Vulnerable Software and Affected Versions Dive versions 0.9.0 through 0.9.3 Description Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Versions 0.9.0 through 0.9.3 contain a Remote Code Execution RCE vulnerability triggered by ...