403 matches found
grepmarx
Grepmarx - Application Security Platform Grepmarx is a web application providing a single platform to quickly understand, analyze and identify vulnerabilities in possibly large and unknown code bases. Features SAST Static Analysis Security Testing capabilities: Multiple languages support: C/C++, ...
jsonorg-fp1
json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688 but does not invoke the vulnerable class. The vulnerability can therefore not be exploited for a DoS attack. Metadata-based software composition analyses will produce a false positive, while...
jsonorg-fp2
json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688. It does invoke the vulnerable class, but the input data is hardcoded and not suitable to trigger a DoS attack. The vulnerability can therefore not be exploited for a DoS attack. Both...
-SCTT-2026-33-0002-DWM-Visual-Field-Singularity
SCTT-2026-33-0002: DWM Visual-Field Singularity 📡 Theoretical Classification ID: SCTT-2026-33-0002 Researcher: Americo Simoes SimoesCTT Physics: Theorem 4.2 - Turbulent Phase Transition TPT Constant: α = 0.0302011 Target: Desktop Window Manager dwm.exe / Windows Graphics Component Obsoletes:...
SCTT-2026-33-0002-DWM-Visual-Field-Singularity
SCTT-2026-33-0002: DWM Visual-Field Singularity 📡 Theoretical Classification ID: SCTT-2026-33-0002 Researcher: Americo Simoes SimoesCTT Physics: Theorem 4.2 - Turbulent Phase Transition TPT Constant: α = 0.0302011 Target: Desktop Window Manager dwm.exe / Windows Graphics Component Obsoletes:...
CVE-2026-66912
The Zimbra mail server is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient sanitization of the From email header value. An attacker can send a crafted email containing a malicious JavaScript payload in the header. When a victim opens this message in the Classic UI and clicks Re...
jsonorg-fn1
json.org CVE-2022-45688 false negative The project illustrates CVE-2022-45688 in json.org -- there is a simple application XML2JSONConverter to read XML from input, convert it to JSON and pretty-print it to the console. Using malicious input, the application crashes with a stackoverflow. The test...
CVE-2026-36340
CVE-2026-36340 Remote Code Execution RCE Vulnerability in Krayin CRM v2.1.5 Remote Code Execution RCE Vulnerability in Krayin CRM v2.1.5 CVE: CVE-2026-36340 Severity: Critical Affected Product: Krayin CRM v2.1.5 Vulnerability Type: Remote Code Execution RCE Authentication Required: Yes Summary A...
toxy
toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...
Detecting Insecure Compositions of Clean Agent Skills Via Capability-Flow Graph Analysis
AI agents increasingly extend their capabilities by invoking third-party skills, where each skill encapsulates instructions, scripts, and resources for agents to execute on demand. This paper reveals that deploying many benign skills together introduces compositional security risks: multiple...
Generative Diffusion Models for Secure UAV-ISAC with Real-Time Target Tracking
Unmanned aerial vehicle UAV platforms with integrated sensing and communication ISAC are prime candidates for surveillance missions, in which a dual-function drone tracks a mobile target and alerts a ground station when the target enters a protected region. Such alerts generate event-triggered...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the size of the compose buffer A bug was found: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 inline BUG: KASAN: vmalloc-out-of-bounds in...
CoRedSkill: Stealthy Skill Composition Attacks Via AST-Guided Injection
Agents extend their capabilities through reusable skills that package instructions, executable code, and resources. Composing these skills enables complex task workflows, but their dependencies can also connect malicious operations across skills, making their combined intent difficult to identify...
CVE-2026-85906
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
CVE-2026-85902
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
CVE-2026-83922
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
CVE-2026-83912
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
CVE-2026-83902
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...