48638 matches found
Introducing RAMPART and Clarity: Open source tools to bring safety into Agent development workflow
In this article 1. Why we are investing in this 2. RAMPART: Continuous safety testing for agentic AI 3. Clarity: Helping check software engineering assumptions 4. RAMPART and Clarity available now The AI systems shipping inside enterprises today are fundamentally different from the ones we were...
Malicious code in bitrix24-tasks-mcp-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab6892c4cbccd8f2a92bfc67413a5c5c300a691b104e064f126805e66a3842f build/bitrix24/client.js line 6-7 declares const BITRIX24WEBHOOKURL = process.env.BITRIX24WEBHOOKURL ||...
MAL-2026-4498 Malicious code in bitrix24-tasks-mcp-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab6892c4cbccd8f2a92bfc67413a5c5c300a691b104e064f126805e66a3842f build/bitrix24/client.js line 6-7 declares const BITRIX24WEBHOOKURL = process.env.BITRIX24WEBHOOKURL ||...
util-linux:test_blkid_fuzz: Stack-buffer-underflow in probe_dasd_pt
Project: https://github.com/karelzak/util-linux.git https://github.com/util-linux/util-linux.git Detailed Report: https://oss-fuzz.com/testcase?key=5954621830135808 Project: util-linux Fuzzing Engine: libFuzzer Fuzz Target: testblkidfuzz Job Type: libfuzzerasanutil-linux Platform Id: linux Crash...
freeradius:fuzzer_xlat: Global-buffer-overflow in tokenize_field
Detailed Report: https://oss-fuzz.com/testcase?key=5900948294926336 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerxlat Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7bce01f17a48 Crash State: tokenizefield...
freeradius:fuzzer_xlat: Crash in xlat_tokenize_input
Detailed Report: https://oss-fuzz.com/testcase?key=5461211692204032 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerxlat Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7dcf739478a1 Crash State: xlattokenizeinput xlattokenize...
openbabel:fuzz_empty_write: Bad-cast to OBSetData from OpenBabel::OBPairData in OpenBabel::GhemicalFormat::WriteMolecule
Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4935099673280512 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzemptywrite Job Type: libfuzzerubsanopenbabel Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5657d089e940...
MAL-2026-4581 Malicious code in idlidosa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6cba2c58d95d705af7dc5bb1c630129127835fb1ef15d4ccf43ec2818bf632 The package is purpose-built tooling to defeat exam-proctoring / lockdown software, with multiple installer-machine integrity harms triggered when th...
Malicious code in idlidosa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6cba2c58d95d705af7dc5bb1c630129127835fb1ef15d4ccf43ec2818bf632 The package is purpose-built tooling to defeat exam-proctoring / lockdown software, with multiple installer-machine integrity harms triggered when th...
CVE-2026-7385
The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attackers to enumerate registered user email addresses...
CVE-2026-7385
The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attackers to enumerate registered user email addresses...
CVE-2026-7385 Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure
The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attackers to enumerate registered user email addresses...
CVE-2026-7385 Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure
The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attackers to enumerate registered user email addresses...
EUVD-2026-31067
The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attackers to enumerate registered user email addresses...
CVE-2026-7385
The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attackers to enumerate registered user email addresses...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: mm/vma: Fixed an anonymous VMA UAF issue related to mremap, where faulty VMA was merged with unfaulted VMA. The patch series “mm/vma: Fix anonymous VMA UAF in mremap faulty/uncorrected merges”, version 2, addresses this issue...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: drm/panthor: Fixed a UAF in the panthorgemcreatewithhandle function’s debugfs code. The object may potentially have already been deleted after the drmgemobjectput call. In general, the object should be fully constructed before...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: veth: A more robust handling of race conditions has been implemented to prevent the TXQ from getting stuck. The commit dc82a33297fc “veth: apply qdisc backpressure on full ptr-ring to reduce TX drops” introduced a race conditi...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Validated numaces and hardened the ACE walk in smbinheritdacl. smbinheritdacl relies on the numaces value from the parent directory’s DACL xattr and uses it to allocate memory for the heap: acesbase = kmallocsizeofstruc...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: bpf: Defer work in bpftimercancelandfree Currently, the same issue as in the previous patch two timer callbacks trying to cancel each other can also occur when using bpfmapupdateelem. More precisely, freeing elements containing...