Lucene search
+L

997 matches found

Packet Storm News
Packet Storm News
added 2026/04/15 12:0 a.m.8 views

Challenges and Future Directions in Agentic Reverse Engineering Systems

Agentic systems built on large language models LLMs are increasingly being used for complex security tasks, including binary reverse engineering RE. Despite recent growth in popularity and capability, these systems continue to face limitations in realistic settings. Cutting-edge systems still fai...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/04/13 7:23 p.m.8 views

CVE-2026-40093

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp = parent.timestamp for non-skip blocks and timestamp == parent.timestamp + MINPRODUCERTIMEOUT for skip blocks, but there is no visible upper...

8.1CVSS5.8AI score0.00314EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/10 7:55 p.m.7 views

EUVD-2026-21146

nimiq-blockchain is missing a wall-clock upper bound on block timestamps...

8.1CVSS5.8AI score0.00314EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/10 7:55 p.m.7 views

GHSA-49XC-52MP-CC9J nimiq-blockchain is missing a wall-clock upper bound on block timestamps

Impact Block timestamp validation enforces that timestamp = parent.timestamp for non-skip blocks and timestamp == parent.timestamp + MINPRODUCERTIMEOUT for skip blocks, but there is no visible upper bound check against the wall clock. A malicious block-producing validator can set block timestamps...

9.1CVSS5.8AI score0.00314EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/09 9:16 p.m.9 views

CVE-2026-40093

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp = parent.timestamp for non-skip blocks and timestamp == parent.timestamp + MINPRODUCERTIMEOUT for skip blocks, but there is no visible upper...

8.1CVSS0.00314EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/09 8:29 p.m.3 views

CVE-2026-40093 nimiq-blockchain is missing a wall-clock upper bound on block timestamps

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp = parent.timestamp for non-skip blocks and timestamp == parent.timestamp + MINPRODUCERTIMEOUT for skip blocks, but there is no visible upper...

8.1CVSS5.8AI score0.00314EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/09 8:29 p.m.4 views

CVE-2026-40093

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp = parent.timestamp for non-skip blocks and timestamp == parent.timestamp + MINPRODUCERTIMEOUT for skip blocks, but there is no visible upper...

8.1CVSS5.9AI score0.00314EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/04/09 8:29 p.m.31 views

CVE-2026-40093 nimiq-blockchain is missing a wall-clock upper bound on block timestamps

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp = parent.timestamp for non-skip blocks and timestamp == parent.timestamp + MINPRODUCERTIMEOUT for skip blocks, but there is no visible upper...

8.1CVSS0.00314EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/09 8:29 p.m.28 views

CVE-2026-40093

The CVE describes a wall-clock upper bound omission in Nimiq’s block timestamp validation for the nimiq-blockchain Rust implementation (1.3.0 and earlier). Specifically, non-skip blocks enforce timestamp >= parent.timestamp and skip blocks enforce timestamp == parent.timestamp + MIN_PRODUCER_T...

8.1CVSS5.9AI score0.00314EPSS
SaveExploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2026/04/06 12:0 a.m.2 views

VulnCheck KEV: CVE-2026-1405

The Slider Future plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'sliderfuturehandleimageupload' function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

9.8CVSS6.5AI score0.03177EPSS
SaveIn wildExploits2References10
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.6 views

PT-2026-30464

🚨 LIVE HIJACK ALERT — CVE-2026-77777. CVSS 8.9. attacker feeds poisoned task output to CrewAI agent memory. future tasks execute attacker instructions as if they were original goals. investigating. 🧵...

6AI score
SaveExploits0References1
OSV
OSV
added 2026/04/04 5:55 a.m.7 views

GHSA-J3W3-P6MR-3HRH DynFuture Drop Can Construct a Dangling Reference

DynFuture is unsound because its Drop implementation transmutes a trait-object reference into unrelated reference types, which constructs an invalid reference from trait object metadata. This issue was reproduced against dyn-future 3.0.4 under Miri. The crate is unmaintained...

6.3CVSS5.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/04/04 5:55 a.m.15 views

DynFuture Drop Can Construct a Dangling Reference

DynFuture is unsound because its Drop implementation transmutes a trait-object reference into unrelated reference types, which constructs an invalid reference from trait object metadata. This issue was reproduced against dyn-future 3.0.4 under Miri. The crate is unmaintained...

5.9AI score
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/02 8:27 a.m.3 views

CVE-2026-29140 S/MIME Signature Additional Certificate

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be used for future encryption to a victim by adding the certificates to S/MIME signatures...

7.7CVSS5.9AI score0.0012EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/02 8:27 a.m.36 views

CVE-2026-29140 S/MIME Signature Additional Certificate

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be used for future encryption to a victim by adding the certificates to S/MIME signatures...

7.7CVSS0.0012EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.5 views

PT-2026-29697

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be used for future encryption to a victim by adding the certificates to S/MIME signatures...

7.7CVSS5.9AI score0.0012EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
added 2026/03/25 2:40 p.m.34 views

New FCC router ban could leave home networks less secure

On Monday, the Federal Communications Commission FCC updated its list of insecure equipment, outlining its reasons for adding all consumer-grade routers made outside the US. Effectively, this would stop foreign-made routers from being imported unless their manufacturers obtain an exemption, due t...

5.9AI score
SaveExploits0
OSV
OSV
added 2026/03/18 9:33 p.m.6 views

CVE-2026-32742 Parse Server session creation endpoint allows overwriting server-generated session fields

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.17 and 8.6.42, an authenticated user can overwrite server-generated session fields sessionToken, expiresAt, createdWith when creating a session object via POST...

4.3CVSS6AI score
SaveExploits0References5
HackRead
HackRead
added 2026/03/18 9:16 p.m.20 views

Computer Vision Frameworks: Features And Future Trends

Computer vision frameworks explained, features, types, and future trends. Learn how AI tools process images, train models, and…...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/03/16 2:20 p.m.12 views

CVE-2026-4216

A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android. This affects an unknown function of the component air.SmartLog.android. This manipulation causes hard-coded credentials. The attack can only be executed locally. The exploit has been made available to the public and cou...

5.3CVSS0.00103EPSS
SaveExploits0References4
Rows per page
Query Builder