10702 matches found
MINI-4V78-M2WW-CHVR
Bulletin has no description...
MINI-MPWX-2H48-74FR
Bulletin has no description...
BELL-CVE-2026-64236
Bulletin has no description...
MINI-6CQ7-JXV2-W3M4
Bulletin has no description...
ECHO-AE6A-CB56-09E6
Bulletin has no description...
AgentSnare: Learning to Delay, Divert, and Defuse Autonomous Penetration Agents
Large language model LLM agents automate penetration testing through an observation-action loop, selecting actions based on observations returned by tools. This dependence allows defenders to inject deceptive observations that can mislead the agent's decision-making process. However, existing...
CGA-8923-9R4W-886V
Bulletin has no description...
Fission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directory
Unarchive in pkg/utils/zip.go joined each archive entry name with the destination directory via filepath.Join and wrote the result without checking whether the resolved path stayed under the destination. A zip entry named ../../tmp/evil therefore landed at /tmp/evil. An attacker who could control...
MINI-4J8G-X77W-7PMQ
Bulletin has no description...
tar: node-tar: Denial of Service via crafted gzip bomb
A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on t...
tar: Node-tar: Denial of Service via malformed tar archive header
A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...
CVE-2026-64265
A flaw was found in the Linux kernel's fuse component. When a fuse request is interrupted and then resent, a specific interrupt entry intrentry is not properly cleared. If the requesting task subsequently receives a fatal signal, this uncleared entry can lead to a use-after-free condition. This...
tar: Node-tar: Denial of Service via malformed tar archive header
A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...
MINI-V274-VPGG-5HJ3
Bulletin has no description...
MINI-V58P-WG9R-Q6JF
Bulletin has no description...
MINI-VQWJ-W3Q6-M624
Bulletin has no description...
MINI-2V2R-F6X7-3CMQ
Bulletin has no description...
MINI-VX4R-M997-JR49
Bulletin has no description...