33 matches found
Tycon Systems TPDIN-Monitor-WEB2 (Update A)
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could result in an attacker accessing sensitive credentials, disrupting connected infrastructure, or manipulating physical equipment, which could present a physical safety risk. 2. RECOMMENDED PRACTICES CISA recommends users take...
EUVD-2026-44509
Twig is a template language for PHP. Prior to 3.26.0, several filters in twig/markdown-extra and twig/cssinliner-extra are registered with issafe = all, causing Twig to treat plain text or HTML output as safe in HTML, JavaScript, CSS, URL, and other contexts where the output is not properly...
Overloading Large Vision-Language Models for Jailbreaking
Large Vision-Language Models LVLMs exhibit remarkable vision-language capabilities and are increasingly deployed in real-world applications such as personal assistants, document analysis systems, and embodied agents. However, their dual-modal attack surfaces make them vulnerable to jailbreak...
CVE-2026-55203
HAProxy
PT-2026-53124
Summary The published npm package praisonai ships dist/tools/utility-tools.js, which exports a shellcommand helper described in source as: text Execute shell command safe version - read-only commands The helper attempts to enforce a safe read-only command allowlist by checking only the first...
OrchJail: Jailbreaking Tool-Calling Text-To-Image Agents by Orchestration-Guided Fuzzing
Tool-calling text-to-image T2I agents can plan and execute multi-step tool chains to accomplish complex generation and editing queries. However, this capability introduces a new safety attack surface: harmful outputs may arise from tool orchestration, where individually benign steps combine into...
thunderbird: Out of bounds read in IMAP parsing
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were...
The vulnerability of the release_module_tags() function in the lib/alloc_tag.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the releasemoduletags function in the lib/alloctag.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
CVE-2026-26741
PX4 Autopilot versions 1.12.x through 1.15.x are vulnerable to a logic flaw in the mode switching mechanism. When a drone is in the ARMED state (specifically after landing but before the automatic disarm triggered by the COM_DISARM_LAND parameter) and the user switches from Auto mode to Manual mo...
EUVD-2020-8203
Malware in sbrugna...
EUVD-2020-8182
Malware in sbrugna...
EUVD-2018-13789
Malware in sbrugna...
EUVD-2025-21092
Malicious code in bioql PyPI...
EUVD-2024-40403
Malicious code in bioql PyPI...
EUVD-2022-2307
Malicious code in bioql PyPI...
EUVD-2024-40397
Malicious code in bioql PyPI...
EUVD-2024-40395
Malicious code in bioql PyPI...
User-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows
The get and set methods of the public trait scratchpad::Tracking interact with unsafe code regions in the crate, and they influence the computation of addresses returned as raw pointers. However, the trait itself is not marked as unsafe, meaning users may provide custom implementations under the...
Hacking Trains
Seems like an old system system that predates any care about security: The flaw has to do with the protocol used in a train system known as the End-of-Train and Head-of-Train. A Flashing Rear End Device FRED, also known as an End-of-Train EOT device, is attached to the back of a train and sends...
PT-2025-29125
Name of the Vulnerable Software and Affected Versions End-of-Train EoT and Head-of-Train HoT devices affected versions not specified Description A critical vulnerability exists in the remote linking protocol used for End-of-Train EoT and Head-of-Train HoT devices, which rely on a BCH checksum for...