The Top 10 Threats Related to Agent Skills

Read about the top 10 critical threats related to Agent Skills that security teams should consider while building and evaluating agents...

GHSA-6JJ6-GM7P-FCVV Remote Code Execution (RCE) vulnerability in geoserver

Summary Multiple OGC request parameters allow Remote Code Execution RCE by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions. Details The GeoTools library API that GeoServer calls evaluates...

How to Manage Your Security Risks

Deciphering the Criticality of Safeguarding Against Security Threats As digital natives, we are well aware that the urgency and importance of ensuring digital safety can't be minimized. The escalating vector of sophisticated digital attacks has brandished a double-edged sword, threatening both...

OSV-2021-689 UNKNOWN WRITE in Runtime_Release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33689 Crash type: UNKNOWN WRITE Crash state: RuntimeRelease EvaluateExpression InitDataSegments...

EulerOS 2.0 SP5 : squid (EulerOS-SA-2020-1931)

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that...

CVE-2017-16023

Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase. Decamelize 1.1.0 through 1.1.1 uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack...

Blocking and Allowing Cookies

You can then evaluate the originating site, whether you wish to accept or deny the cookie, and what action to take allow or block, with the option to remember the decision for all future cookies from that web site. For example, if visiting a web site causes a cookie prompt from a web domain that ...