13562 matches found
Fortifying the Agentic Web: a Unified Zero-Trust Architecture against Logic-Layer Threats
This paper presents a Unified Security Architecture that fortifies the Agentic Web through a Zero-Trust IAM framework. This architecture is built on a foundation of rich, verifiable agent identities using Decentralized Identifiers DIDs and Verifiable Credentials VCs, with discovery managed by a...
Cyber Risks to Next-Gen Brain-Computer Interfaces: Analysis and Recommendations
Brain-computer interfaces BCIs show enormous potential for advancing personalized medicine. However, BCIs also introduce new avenues for cyber-attacks or security compromises. In this article, we analyze the problem and make recommendations for device manufacturers to better secure devices and to...
MCPSecBench: a Systematic Security Benchmark and Playground for Testing Model Context Protocols
Large Language Models LLMs are increasingly integrated into real-world applications via the Model Context Protocol MCP, a universal, open standard for connecting AI agents with data sources and external tools. While MCP enhances the capabilities of LLM-based agents, it also introduces new securit...
CVE-2025-54747
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpbakery Templatera templatera allows DOM-Based XSS.This issue affects Templatera: from n/a through = 2.3.0...
CVE-2025-49433
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThanhD Supermalink supermalink allows DOM-Based XSS.This issue affects Supermalink: from n/a through = 1.1...
CVE-2025-54706
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Magical Posts Display magical-posts-display allows DOM-Based XSS.This issue affects Magical Posts Display: from n/a through = 1.2.52...
CVE-2025-38518 x86/CPU/AMD: Disable INVLPGB on Zen2
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has...
Mitigating Jailbreaks with Intent-Aware LLMs
Despite extensive safety-tuning, large language models LLMs remain vulnerable to jailbreak attacks via adversarially crafted instructions, reflecting a persistent trade-off between safety and task performance. In this work, we propose Intent-FT, a simple and lightweight fine-tuning approach that...
Exploit for CVE-2024-3660
CVE-2024-3660 – TensorFlow Keras Arbitrary Code Execution via...
CVE-2025-49898
CVE-2025-49898 refers to a DOM-based XSS in the WordPress plugin Dropshix (Dropshix
MINI-M62G-76R7-254G
Bulletin has no description...
CVE-2025-26709
CVE-2025-26709 affects ZTE F50 with an unauthorized access vulnerability due to improper permission control in the Web module interface. The root cause is insufficient access controls, allowing an attacker with adjacent access and low exploit complexity to obtain sensitive information via the Web...
CVE-2025-8451
CVE-2025-8451 — The WordPress plugin Essential Addons for Elementor – Popular Elementor Templates & Widgets (Essential Addons for Elementor Lite) is vulnerable to a DOM-based Stored XSS via the data-gallery-items parameter in all versions up to and including 6.2.2. The issue arises from insuffici...
Exploit for CVE-2025-50461
CVE-2025-50461: Remote Code Execution via Unsafe Model Deseria...
Linux Distros Unpatched Vulnerability : CVE-2025-37812
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has the same NCM deadlock as fixed in cdnsp by commit 58f2fcb3a845 usb: cdnsp: Fix deadlock issu...
Ollama <= 0.3.3 DoS
The version of Ollama installed on the remote host is prior or equal to 0.3.3. It is, therefore, affected by a vulnerability. A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the...
Linux Distros Unpatched Vulnerability : CVE-2021-46977
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Disable preemption when probing user return MSRs Disable preemption when probing a...
Malicious code in semio-lever-model (npm)
The package semio-lever-model was found to contain malicious code...