572 matches found
context-segmentation
Context Segmentation for SLM Agents This is the implementation of the solution proposed in the scientific paper: Evaluating Context Segmentation in Locally Deployable SLMs for Cybersecurity CTF Tasks Setup Ensure you have Python 3.12.3+ installed along with Docker engine Python environment python...
WordPress OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin <= 6.3.10 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by uhcna in WordPress Plugin OMGF | Host Google Fonts Locally versions = 6.3.10...
WordPress OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin < 6.3.11 - Unauthenticated DoS vulnerability
Unauthenticated DoS vulnerability discovered by Ángel Santana in WordPress Plugin OMGF | Host Google Fonts Locally versions 6.3.11...
PT-2026-102454
Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...
CVE-2026-86157: Exposed Dangerous Method or Function
Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...
Automated Extraction of Records of Processing Activities (RoPA) Using Hybrid RAG and Locally Deployed Large Language Models
Vietnam's Personal Data Protection Law Law No. 91/2025/QH15 and Decree No. 356/2025/ND-CP, effective January 1, 2026, require organizations to establish and maintain Records of Processing Activities RoPA. Manual RoPA preparation is labor-intensive, while cloud-hosted large language models LLMs ma...
CVE-2026-92706: Exposure of Sensitive Information to an Unauthorized Actor
Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a website can cause the browser extension's image inversion pipeline to request an unauthenticated icon-like bitmap from a locally running web server when the resource uses a known public-like...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
A null pointer dereference was detected in the Linux kernel’s Integrated Sensor Hub ISH driver. This issue could allow a local user to crash the system...
CVE-2026-54218
Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in various files using only obfuscation. Any user with access to the server’s file system, or who can otherwise extract files from the server see...
CVE-2026-19058 FoundationAgents MetaGPT data_interpreter.py DataInterpreter code injection
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/datainterpreter.py. The manipulation results in code injection. The attack must be initiated from a local position. The exploit has been made public...
vibe-playground
!CIhttps://github.com/amin-ale/vibe-playground/actions/workf...
EUVD-2026-44109
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...
EUVD-2026-44071
Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...
EUVD-2026-44221
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...
EUVD-2026-44183
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
PT-2026-58553
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office, which could allow an unauthorized attacker to execute code locally. A heap-based buffer overflow occurs when a program writes...
PT-2026-58229
Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A use after free issue exists in Windows Hyper-V, which allows an authorized attacker to elevate privileges locally. This flaw can enable an attacker with low-privilege access to gain...
PT-2026-58256
Name of the Vulnerable Software and Affected Versions Windows CryptoAPI affected versions not specified Description A missing cryptographic step in the Windows CryptoAPI allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the moment, there is ...