LLMs, You Can Evaluate It! Design of Multi-Perspective Report Evaluation for Security Operation Centers

Security operation centers SOCs often produce analysis reports on security incidents, and large language models LLMs will likely be used for this task in the near future. We postulate that a better understanding of how veteran analysts evaluate reports, including their feedback, can help produce...

MCP-SandboxScan: WASM-Based Secure Execution and Runtime Analysis for MCP Tools

Tool-augmented LLM agents raise new security risks: tool executions can introduce runtime-only behaviors, including prompt injection and unintended exposure of external inputs e.g., environment secrets or local files. While existing scanners often focus on static artifacts, analyzing runtime...

PT-2026-27716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the pipapo set type in the netfilter module. A large number of expired elements can cause the garbage collection process to run fo...

CVE-2025-15388

creationtimestamp| type| source ---|---|--- 2025-12-31 08:13:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10614-dee41-2.html 2025-12-31 09:18:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbbjutbhay2p 2025-12-31 09:48:46+00:00| seen|...

WordPress EZ SQL Reports Shortcode Widget and DB Backup plugin <= 5.25.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via SQLREPORT Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via SQLREPORT Shortcode vulnerability discovered by Gilang - DJ in WordPress Plugin EZ SQL Reports Shortcode Widget and DB Backup versions = 5.25.11...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992742 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointe...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993281 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interfac...

CVEhunter-Tools

CVEhunter: Integrated AI-Assisted Code Auditing Toolkit Windo...

CVE-2025-69034

creationtimestamp| type| source ---|---|--- 2025-12-30 12:20:23+00:00| seen| https://gist.github.com/Darkcrai86/e4013e08e4f036b0373cdbcc2d4cbc47 2025-12-30 13:31:36+00:00| seen| https://gist.github.com/Darkcrai86/50dc6845832f990c6604fdee826e3781 2026-01-05 15:03:42+00:00|...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992565 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointe...

Exploit for Insufficient Type Distinction in Rarlab Winrar

CVE Exploit Finder Author: Your Name/Handle Focus: Automated V...

Complete Online Beauty Parlor Management System /bwdates-reports-details.php file cross-site scripting vulnerability

Complete Online Beauty Parlor Management System is an online beauty parlor management system. Complete Online Beauty Parlor Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter...

EUVD-2023-60316

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation for lmac type Upon physical link change, firmware reports to the kernel about the change along with the details like speed, lmactypeid, etc. Kernel derives lmactype based on lmactypeid received from...

CVE-2023-54129 octeontx2-af: Add validation for lmac type

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation for lmac type Upon physical link change, firmware reports to the kernel about the change along with the details like speed, lmactypeid, etc. Kernel derives lmactype based on lmactypeid received from...

CVE-2023-54129

CVE-2023-54129 concerns the Linux kernel driver for Marvell octeontx2-af (cgx.c). When a physical link changes, firmware reports lmac_type_id to the kernel, which derives lmac_type from it. In some cases, firmware could return an invalid lmac_type_id, triggering a kernel Oops. The public records ...

AZL-78410 CVE-2025-68365 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfsreadhdr 3 - KMSAN: uninit-value in bcmp 3 Memory is allocated by getname, which is a wrapper for...

CVE-2025-68365 fs/ntfs3: Initialize allocated memory before use

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfsreadhdr 3 - KMSAN: uninit-value in bcmp 3 Memory is allocated by getname, which is a wrapper for...

PoC-Analyzer

PoC Analyzer Proof-of-Concept Malicious Intent Detector !P...

CVE-2025-14991

A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing a manipulation of the argument fromdate can lead to cross site scripting. The attack may be launch...

CVE-2025-14991

A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing a manipulation of the argument fromdate can lead to cross site scripting. The attack may be launch...