39281 matches found
artificial-detection (0.1.0), benchformer (0.0.1.dev1) +1 more potentially affected by CVE-2026-9856 via transformers (4.12.3)
transformers PYPI version 4.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - artificial-detection 0.1.0 - benchformer 0.0.1.dev1 - tai-chi-engine =0.0.4, =0.0.6 Source cves: CVE-2026-9856 Source advisory:...
jadx-magic-strings v1.0.3-dev
JADX Magic Strings Plugin A JADX plugin that extracts information from string constants. Features The plugin extracts and analyzes string constants from decompiled code to find: 1. Source File References : Detects references to Java/Kotlin source files .java, .kt, .kts, .scala, .groovy in string...
CVE-2026-81199
creationtimestamp| type| source ---|---|--- 2026-09-10 06:00:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-81199.yaml 2026-09-11 00:00:03+00:00| confirmed|...
threatest v1.5.0
Threatest Threatest is a CLI and Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...
Self-Verifying Anomaly Detection Using Explainable AI for Cybersecurity of DER Networks
The rapid growth of Distributed Energy Resources DERs has significantly expanded the cyber attack surface of modern power grids. Furthermore, increasing sophistication in attack techniques demands anomaly detection systems ADS that are accurate, interpretable, and reliable to support DER...
CVE-2026-71642
An issue in ZJU-FAST-Lab EGO-Planner-v2 (all versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 ) allows an attacker to cause a denial of service . The vulnerability is triggered via the EGOReplanFSM::checkCollisionCallback() function. No specific exploitation details or remediation s...
PT-2026-89607
Name of the Vulnerable Software and Affected Versions EGO-Planner-v2 versions prior to commit 5c99a95880401e2599638d567abc0e240396cb42 Description A flaw in the ego replan fsm.cpp file allows an attacker to trigger a denial of service. This occurs through the checkCollisionCallback,...
Few-Shot Learning for Network Intrusion Detection: Methods, Datasets, and Performance
Anomaly-based network intrusion detection systems NIDS are an important first line of defense. However, training NIDS for new attack types is challenging, because labeled attack data are rarely available. Few-shot learning FSL addresses this problem by learning from few samples. However, the...
detection-rules dev-v2.2.0
Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...
GraySentinel-DSOU-45Day-2026
GraySentinel DSOU — Day 1: The Zero-Day Discovery Blue Team...
net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...
CVE-2026-86081
creationtimestamp| type| source ---|---|--- 2026-09-09 10:57:05+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-7...
CVE-2026-86075
creationtimestamp| type| source ---|---|--- 2026-09-09 10:56:59+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-7 2026-09-12 14:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdavovp6c25...
nerva v1.69.6
Nerva Nerva: Fast Service Fingerprinting CLI Features • Installation • Quick Start • Usage • Protocols • Library • Use Cases • Troubleshooting High-performance service fingerprinting written in Go. Identify 170+ network protocols across TCP, UDP, and SCTP transports with rich metadata extraction...
DriftNet: A Dual-Head Trajectory Transformer for Detecting and Localizing Prompt Injection in LLM Agents
When an indirect prompt injection succeeds against an LLM agent, the compromise is visible in the agent's own behavior: a benign prefix of tool calls, a poisoned observation, and a suffix of actions that serve the attacker. An operator needs three facts: where the attack entered, which steps it...
Temporal and Multimodal Deep Learning for Cyberattack Detection in LEO Satellite Systems
The growing reliance on Low-Earth Orbit LEO satellite communication systems has increased the need for intelligent methods capable of detecting cyberattacks across complex and dynamic space environments. Unlike conventional network intrusion detection, satellite systems generate heterogeneous...
An Empirical Analysis of ReDoS Vulnerabilities and ReDoS Detection Tools
ReDoS vulnerabilities are a type of denial of service software weakness that occurs when a regex is used to validate user-supplied input. In some cases, the regex matching process can take exponential time, leading to a denial of service. In this study, we examine and compare the effectiveness of...
PT-2026-102364
Name of the Vulnerable Software and Affected Versions PyJWT versions 2.13.0 through 2.13.x Description An issue exists in the HMACAlgorithm.prepare key function within jwt/algorithms.py where the raw-JWK detector fails to normalize Unicode byte-order marks BOM before JSON validation. When a publi...
No-Box Vulnerability Analysis: Description-Only Detection of Indirect Prompt Injection Vulnerabilities in MCP Servers
Conventional vulnerability analysis relies on either system access or dynamic interaction, all of which may be unavailable to third-party analysts auditing closed-source, remotely hosted, critical in situ systems, or commercially gated software. Therefore, we propose a new paradigm of no-box...
Towards Scalable and Cost-Efficient Vulnerability Detection: A Study on Automatic Query Generation
Static analysis remains a cornerstone of software security, yet the effectiveness of tools such as CodeQL is often limited by the substantial manual effort required to develop high-coverage query suites. While large language models LLMs have emerged as a potential solution for automated code...