577 matches found
context-segmentation
Context Segmentation for SLM Agents This is the implementation of the solution proposed in the scientific paper: Evaluating Context Segmentation in Locally Deployable SLMs for Cybersecurity CTF Tasks Setup Ensure you have Python 3.12.3+ installed along with Docker engine Python environment python...
Dell PowerProtect Data Domain encryption issue vulnerability
Versions 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20 of Dell PowerProtect Data Domain contain an encryption vulnerability stemming from improper validation of integrity check values. This vulnerability may allow locally authenticated...
WatchGuard Fireware OS authorization issue vulnerability
Security vulnerabilities exist in WatchGuard Fireware OS versions from 2025.1 up to and including 2026.4, as well as versions 12.7 through 12.12.4. These vulnerabilities stem from improper authentication within the AuthPoint multi-factor authentication process. As a result, locally unauthenticate...
CVE-2026-100207
Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...
Nexcess Kadence Blocks: Cross-site Scripting Vulnerabilities
Nexcess Kadence Blocks versions 3.7.12 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping, leading to a stored-xss attack through the Block Font Family Attribute. Attackers with author-level or higher permissions ca...
WordPress OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin <= 6.3.10 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by uhcna in WordPress Plugin OMGF | Host Google Fonts Locally versions = 6.3.10...
WordPress OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin < 6.3.11 - Unauthenticated DoS vulnerability
Unauthenticated DoS vulnerability discovered by Ángel Santana in WordPress Plugin OMGF | Host Google Fonts Locally versions 6.3.11...
PT-2026-102454
Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...
CVE-2026-86157: Exposed Dangerous Method or Function
Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...
Automated Extraction of Records of Processing Activities (RoPA) Using Hybrid RAG and Locally Deployed Large Language Models
Vietnam's Personal Data Protection Law Law No. 91/2025/QH15 and Decree No. 356/2025/ND-CP, effective January 1, 2026, require organizations to establish and maintain Records of Processing Activities RoPA. Manual RoPA preparation is labor-intensive, while cloud-hosted large language models LLMs ma...
CVE-2026-92706: Exposure of Sensitive Information to an Unauthorized Actor
Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a website can cause the browser extension's image inversion pipeline to request an unauthenticated icon-like bitmap from a locally running web server when the resource uses a known public-like...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
A null pointer dereference was detected in the Linux kernel’s Integrated Sensor Hub ISH driver. This issue could allow a local user to crash the system...
CVE-2026-54218
Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in various files using only obfuscation. Any user with access to the server’s file system, or who can otherwise extract files from the server see...
CVE-2026-19058 FoundationAgents MetaGPT data_interpreter.py DataInterpreter code injection
A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/datainterpreter.py. The manipulation results in code injection. The attack must be initiated from a local position. The exploit has been made public...
MetInfo <=6.1.0 - Local File Inclusion Detection
MetInfo 6.0.0 through 6.1.0 is vulnerable to local file inclusion and allows remote unauthenticated attackers access to locally stored files and their content. !/usr/bin/env python3 -- coding: utf-8 -- """MetInfo 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...
vibe-playground
!CIhttps://github.com/amin-ale/vibe-playground/actions/workf...
EUVD-2026-44109
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...
EUVD-2026-44071
Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...