5946 matches found
EUVD-2025-201474
Malicious code in elf-stats-tinsel-muffin-395 npm...
CVE-2025-66536
creationtimestamp| type| source ---|---|--- 2025-12-05 06:40:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77uvxjbxi2a...
CVE-2025-66543
creationtimestamp| type| source ---|---|--- 2025-12-05 06:37:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77uqljqj32x...
CVE-2025-66538
creationtimestamp| type| source ---|---|--- 2025-12-05 06:34:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77ulp4js72s...
EUVD-2025-201218
In the Linux kernel, the following vulnerability has been resolved: erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Linux 6.15: - The first one 1 has plen !...
Security Bulletin: Multiple vulnerabilities in IBM Controller
Summary Multiple vulnerabilities were addressed in IBM Controller 11.1.2. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could...
EUVD-2025-201103
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick...
EUVD-2025-201069
Malicious code in elf-stats-nutmeg-cookie-584 npm...
CVE-2025-39931
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...
EUVD-2025-200927
Malicious code in elf-stats-evergreen-muffin-867 npm...
Security Bulletin: Multiple vulnerabilities in IBM QRadar Use Case Manager app
Summary Multiple vulnerabilities were addressed in IBM QRadar Use Case Manager app version 4.1.0 Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. When Axios prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a...
📄 WhatsApp Android Contact Gating Bypass
WhatsApp Android has a contact gating bypass in groups that leads to interaction-less media download. Background To prevent security issues and spam, WhatsApp for Android requires some form of user interaction to automatically download files from non-contacts: a. After adding someone as a contact...
Rethinking Cybersecurity Ontology Classification and Evaluation: Towards a Credibility-Centered Framework
This paper analyzes the proliferation of cybersecurity ontologies, arguing that this surge cannot be explained solely by technical shortcomings related to quality, but also by a credibility deficit - a lack of trust, endorsement, and adoption by users. This conclusion is based on our first...
Systems Security Foundations for Agentic Computing
This paper articulates short- and long-term research problems in AI agent security and privacy, using the lens of computer systems security. This approach examines end-to-end security properties of entire systems, rather than AI models in isolation. While we recognize that hardening a single mode...
CVE-2025-7449
creationtimestamp| type| source ---|---|--- 2025-11-26 23:56:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6l2mpgooh2u 2025-11-27 14:45:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m6mmc2leh72h...
Security Bulletin: Vulnerability in IBM DevOps Solution Workbench
Summary The following vulnerability was addressed in IBM DevOps Solution Workbench version 5.1. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent...
A Safety and Security Framework for Real-World Agentic Systems
This paper introduces a dynamic and actionable framework for securing agentic AI systems in enterprise deployment. We contend that safety and security are not merely fixed attributes of individual models but also emergent properties arising from the dynamic interactions among models, orchestrator...
CVE-2025-64064
creationtimestamp| type| source ---|---|--- 2025-11-25 21:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6idggbi4t2x...
