1002 matches found
Code Agent Can Be an End-To-End System Hacker: Benchmarking Real-World Threats of Computer-Use Agent
Computer-use agent CUA frameworks, powered by large language models LLMs or multimodal LLMs MLLMs, are rapidly maturing as assistants that can perceive context, reason, and act directly within software environments. Among their most critical applications is operating system OS control. As CUAs in...
EUVD-2024-0257
Malicious code in bioql PyPI...
EUVD-2024-1647
Malicious code in bioql PyPI...
EUVD-2022-7146
Malicious code in bioql PyPI...
EUVD-2025-18136
Malicious code in bioql PyPI...
EUVD-2025-21796
Malicious code in bioql PyPI...
EUVD-2023-32978
Malicious code in bioql PyPI...
PT-2025-40477
Name of the Vulnerable Software and Affected Versions Schema Plugin For Divi, Gutenberg & Shortcodes versions prior to 4.3.2 Description The Schema Plugin For Divi, Gutenberg & Shortcodes for WordPress is susceptible to Object Instantiation up to version 4.3.2 through deserialization of untrusted...
LegalSim: Multi-Agent Simulation of Legal Systems for Discovering Procedural Exploits
We present LegalSim, a modular multi-agent simulation of adversarial legal proceedings that explores how AI systems can exploit procedural weaknesses in codified rules. Plaintiff and defendant agents choose from a constrained action space for example, discovery requests, motions, meet-and-confer,...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent-operator, grafana-alloy, controller-gen, prometheus-operator, oauth2-proxy, gobump, wait-for-port, aws-privateca-issuer, eksctl, rabbitmq-default-user-credential-updater, wire-go, prometheus, kubernetes-dashboard, thanos-operator, aactl, kapp,...
CVE-2025-47910 vulnerabilities
Vulnerabilities for packages: aws-privateca-issuer, kapp-controller, ip-masq-agent, containerd, terraform, rke2-runtime, dgraph, rancher, wire-go, kapp, helm-push, azure-service-operator, nuclei, wait-for-port, swagger, headlamp, undock, consul-k8s, buildkitd, fulcio, gptscript,...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: aws-privateca-issuer, kapp-controller, ip-masq-agent, containerd, terraform, rke2-runtime, dgraph, rancher, wire-go, kapp, helm-push, azure-service-operator, nuclei, wait-for-port, swagger, headlamp, undock, consul-k8s, buildkitd, fulcio, gptscript,...
A Cyberattack on Jaguar Land Rover Is Causing a Supply Chain Disaster
The UK-based automaker has been forced to stop vehicle production as a result of the attack—costing JLR tens of millions of dollars and forcing its parts suppliers to lay off workers...
UBUNTU-CVE-2025-39848
In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25kissrcv Bernard Pidoux reported a regression apparently caused by commit c353e8983e0d "net: introduce per netns packet chains". skb-dev becomes NULL and we crash in netifreceiveskbcore. Before...
CVE-2025-39848 ax25: properly unshare skbs in ax25_kiss_rcv()
In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25kissrcv Bernard Pidoux reported a regression apparently caused by commit c353e8983e0d "net: introduce per netns packet chains". skb-dev becomes NULL and we crash in netifreceiveskbcore. Before...
Vivaldi 7.6: customize everything and rule your tabs
Make the Tab Bar yours Your browser belongs to you. Hence, it must be able to reflect you. Vivaldi is the most customizable browser available, and with our latest update, 7.6, we’re turning customization all the way up to 11. The Tab Bar is where your browsing comes to life, so it's integral that...
gadgetinspector
This is a Java-based tool for finding deserialization gadget chains in Java applications. The tool is called "Gadget Inspector" and is presented as a project that was showcased at Black Hat USA 2018. The tool is designed to automatically discover possible gadget chains in an application's...
ysoserial
This is a proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. The tool, called ysoserial, is a collection of utilities and property-oriented programming "gadget chains" discovered in common Java libraries that can, under the right conditions, exploit Jav...
ysoserial
This is a Java-based proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. The tool, named ysoserial, is designed to create gadgets that can be used to execute arbitrary commands on a vulnerable application. The gadgets are created by wrapping a...
