24389 matches found
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems
Existing research on LLM agent security mainly focuses on prompt injection and unsafe input/output behaviors. However, as agents increasingly rely on third-party tools and MCP servers, a new class of supply-chain threats has emerged, where malicious behaviors are embedded in seemingly benign tool...
PT-2026-34977
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the alps raw event function within the hid-alps driver. This occurs because the driver fails to properly check if it has been claimed correctly befor...
CVE-2026-5603
creationtimestamp| type| source ---|---|--- 2026-04-05 23:24:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvgw46kw2n 2026-04-06 04:18:10+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3misfu7eyij2d...
CVE-2026-5560
creationtimestamp| type| source ---|---|--- 2026-04-05 12:51:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqs3e4njf23...
CVE-2026-5532
creationtimestamp| type| source ---|---|--- 2026-04-05 04:13:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipv3zjfcs2g...
[SECURITY] Fedora 43 Update: libinput-1.30.3-1.fc43
libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. It provides device detection, device handling, input device event processing and abstraction so minimize the amount of custom input code the user of libinput...
CVE-2026-35570
creationtimestamp| type| source ---|---|--- 2026-04-04 15:00:15+00:00| published-proof-of-concept| Telegram/lD1pIo6VPHjGmg3aW5vdalntS6EHCArlzrfAmHu2lnKH1Ic 2026-04-21 01:18:26+00:00| published-proof-of-concept| Telegram/Ww620GgPpyXrrMPbpNwPksYQUctI-RNYBJrVLxtJIutZ-I 2026-04-21 03:21:28+00:00| see...
CVE-2018-25241
creationtimestamp| type| source ---|---|--- 2026-04-04 14:59:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mioiqbgzee2i...
CVE-2026-0552
creationtimestamp| type| source ---|---|--- 2026-04-04 08:34:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mintaqwxit2z 2026-04-10 19:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj62ojznyu2m...
GHSA-98F9-FQG5-HVQ5
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:49+00:00| seen| Telegram/Wq2MikHHjaMT3QcZYic1EqOjYlzbZBeR3fuLUZ6lQSb49CA...
GHSA-365W-2M69-MP9X
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc...
GHSA-2JG8-RMHM-XV9M
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc...
GHSA-5RM9-893Q-VMHM
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc...
CVE-2026-34612
creationtimestamp| type| source ---|---|--- 2026-04-04 00:24:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimxtzrhzp2q 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc 2026-04-04 03:01:37+00:00| seen|...
CVE-2026-34766
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, the select-usb-device event callback did not validate the chosen device ID against the filtered list that was presented to the...
Electron 安全漏洞
Electron is an open-source JavaScript framework developed by users for creating cross-platform desktop applications. This framework is based on Node.js and Chromium, allowing the development of cross-platform desktop applications using HTML and CSS. There are security vulnerabilities in versions ...
SUSE CVE-2026-23440
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN update In IPSec full offload mode, the device reports an ESN Extended Sequence Number wrap event to the driver. The driver validates this event by querying the IPSec ASO and checking...
CVE-2026-27634
creationtimestamp| type| source ---|---|--- 2026-04-03 22:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimsrx2lih27 2026-04-03 23:21:15+00:00| published-proof-of-concept| Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw...
@afidos/nestjs-event-notifications (>=2.2.1, <=2.2.2), @mieweb/wikigdrive (>=2.15.0, <=2.17.1) +3 more potentially affected by CVE-2026-34211 via @nyariv/sandboxjs (>=0.5.3, <=0.8.25)
@nyariv/sandboxjs NPM version =0.5.3, =2.2.1, =2.15.0, =0.2.0, =11.0.0, =12.0.1 Source cves: CVE-2026-34211 Source advisory: OSV:GHSA-8PFC-JJGW-6G26...