15927 matches found
MINI-JHCW-M4X3-834P
Bulletin has no description...
GHSA-83W9-H5WV-J9XM OpenClaw: Node pairing reconnection could confuse approval scope state
Summary Node pairing reconnection could confuse approval scope state. In affected versions, a paired or reconnecting node session could mutate pairing state in a way that changed the approval scope decision. This advisory is scoped to the named feature and configuration. It does not change...
OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions
Summary Slack plugin approvals used the exec approver gate for plugin actions. In affected versions, a Slack user authorized only for exec approvals could resolve a plugin approval through the exec approver gate. This advisory is scoped to the named feature and configuration. It does not change...
MINI-M668-G893-3H3M
Bulletin has no description...
MINI-GP22-M4MG-HH7J
Bulletin has no description...
MINI-RVFH-MVGG-M3MG
Bulletin has no description...
Out of bounds read in Tensorflow
ImpactThe TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect.If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can caus...
MINI-WHXR-96GW-C34W
Bulletin has no description...
MINI-22VM-XRP4-58QR
Bulletin has no description...
MINI-8226-H48W-PFXJ
Bulletin has no description...
MINI-X733-R455-2PF9
Bulletin has no description...
MINI-HH7R-RM27-V855
Bulletin has no description...
Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation
A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Hiyouga Llama-Factory
CVE-2026-58116 — LLaMA-Factory WebUI RCE via trustremotecod...
Most AI ROI Gets Lost in the Infrastructure, Not the Model
...
MINI-FHCP-53PW-RW73
Bulletin has no description...
CVE2PoC
CVE2PoC A prototype for generating real npm vulnerability PoC...
K000162034: Node.js vulnerability CVE-2026-48617
Security Advisory Description A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported...