136913 matches found
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...
MAL-2026-17596 Malicious code in electrum-protocol-lite (RubyGems)
RubyGems runs this gem's native extension script ext/electrum-protocol-lite/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is ove...
Malicious code in electrum-protocol-lite (RubyGems)
RubyGems runs this gem's native extension script ext/electrum-protocol-lite/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is ove...
Bounded Provisional Visibility: Controlling Poisoning Exposure in Continuously Ingested RAG Vector Stores
Continuous ingestion can expose new retrieval-augmented generation RAG content to retrieval before vetting completes, creating a temporal attack surface that conventional admission decisions do not capture. We present a fail-closed provisional-visibility protocol that admits new content under a...
IMAP Client API Ruby Command Injection
The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
IMAP Client API Ruby DoS
The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to incorrect filtering of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
IMAP Client API Ruby Command Injection
The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
CVE-2026-105741: Authentication Bypass by Spoofing
Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...
PT-2026-106236
Name of the Vulnerable Software and Affected Versions Langflow versions 1.5.0 through 1.10.2 Description An IP spoofing issue exists in the Model Context Protocol MCP configuration installation endpoint 'POST /api/v1/mcp/project/project id/install'. Authenticated remote attackers can bypass the...
[SECURITY] [DLA 4819-1] php8.2 security update
Debian LTS Advisory DLA-4819-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 05, 2026 https://wiki.debian.org/LTS Package : php8.2 Version : 8.2.34-1deb12u1 CVE ID : CVE-2025-1218 CVE-2025-14181 CVE-2026-6103 CVE-2026-91765 CVE-2026-91766 CVE-2026-91767...
openSUSE 16: libwireshark18 / libwiretap15 / libwsutil16 / wireshark / etc (openSUSE-SU-2026:22014-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22014-1 advisory. Update to Wireshark 4.4.18: - CVE-2026-19694: TTX Logger file parser crash bsc1275279. - CVE-2026-19695: Gammu DCT3 trace file parser crash...
Understanding the Hierarchical Structure and Functional Landscape of the Model Context Protocol Ecosystem
AI agents increasingly rely on tools exposed through the Model Context Protocol MCP to complete user tasks. Hundreds of thousands of MCP servers are listed across marketplaces, yet they are organized only by coarse, marketplace-specific server categories. This makes it difficult for agents and...
Performance Analysis of Multiparty GHZ-State Quantum Conference Key Agreement over Optical Fiber Channel
Quantum conference key agreement QCKA enables multiple spatially separated users to establish a common key with composable information-theoretic security by exploiting multipartite quantum correlations. Greenberger--Horne--Zeilinger GHZ states are a natural resource for this task, but their...
Debian dla-4819 : libapache2-mod-php8.2 - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4819 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4819-1 [email protected]...
[SECURITY] Fedora 45 Update: xcb-proto-1.17.0-12.fc45
XCB is a project to enable efficient language bindings to the X11 protocol. This package contains the protocol descriptions themselves. Language bindings use these protocol descriptions to generate code for marshalling the protocol...
Rocky Linux 10.2 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc (crlsa-2026_73979)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202673979 advisory. freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass CVE-2026-91949 Tenable has extracted the preceding description block directly from the CIQ...
COPEX: Benchmarking LLM Robustness to Adversarial Context across Model Context Protocol Layers
Large language models increasingly mediate tool use in Model Context Protocol MCP systems, where adversarial influence may enter through user instructions, tool schemas, tool outputs, or protocol messages. Existing benchmarks often evaluate deployed agents, conflating model susceptibility with...
[SECURITY] [DSA 6540-1] radsecproxy security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6540-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2026 https://www.debian.org/security/faq -...
RLSA-2026:73979 Critical: freerdp security update
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass...