9691 matches found
MINI-9WH9-MG4P-846H
Bulletin has no description...
CVE-2026-32269
Parse Server vulnerability CVE-2026-32269 affects deployments using the OAuth2 adapter with both appidField and appIds configured. The issue stems from incorrect validation of app IDs where a malformed value is sent to the token introspection endpoint instead of the user’s actual access token, po...
CVE-2026-30916 Shescape has possible misidentification of shell due to link chains
Shescape is a simple shell escape library for JavaScript. Prior to 2.1.9, an attacker may be able to bypass escaping for the shell being used. This can result, for example, in exposure of sensitive information. This impacts users of Shescape that configure their shell to point to a file on disk...
GHSA-79WJ-8RQV-JVP5
creationtimestamp| type| source ---|---|--- 2026-03-06 20:40:06+00:00| seen| https://gist.github.com/alon710/c6f9f46bb80364d9d8a079167039fc0b...
CVE-2026-28435
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, cpp-httplib httplib.h does not enforce Server::setpayloadmaxlength on the decompressed request body when using HandlerWithContentReader streaming ContentReader with Content-Encoding: gzip or other...
MINI-3QWF-R5M9-99JC
Bulletin has no description...
MINI-XFFC-4CR5-6QV6
Bulletin has no description...
MINI-VXV7-MGHH-XCHR
Bulletin has no description...
MINI-F657-R5JM-R3XR
Bulletin has no description...
MINI-59M6-V62H-8WGV
Bulletin has no description...
MINI-4782-3FMR-48JP
Bulletin has no description...
LLM-Assisted Deanonymization
Turns out that LLMs are good at de-anonymization: We show that LLM agents can figure out who you are from your anonymous online posts. Across Hacker News, Reddit, LinkedIn, and anonymized interview transcripts, our method identifies users with high precision and scales to tens of thousands of...
ASB-A-472596019
Bulletin has no description...
MINI-QVPX-J9FJ-F9FF
Bulletin has no description...
CVE-2026-28208
A flaw was found in Junrar, an open-source Java RAR archive library. This vulnerability, a backslash path traversal, allows a remote attacker to write arbitrary files to any location on the filesystem when a specially crafted RAR archive is extracted on Linux/Unix systems. This can lead to remote...
CVE-2026-27613
creationtimestamp| type| source ---|---|--- 2026-02-26 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfpvbvhoae26 2026-02-26 01:47:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfq3b5rznv2u...
Fleet 安全特征问题漏洞
Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.80.1 contained security...
A Systematic Review of Algorithmic Red Teaming Methodologies for Assurance and Security of AI Applications
Cybersecurity threats are becoming increasingly sophisticated, making traditional defense mechanisms and manual red teaming approaches insufficient for modern organizations. While red teaming has long been recognized as an effective method to identify vulnerabilities by simulating real-world...