138 matches found
Back to Basics: Formal Analysis Hints Improve Weak-To-Strong Monitoring
Frontier agentic systems are capable of taking misaligned actions that may cause significant harm. Monitoring techniques are developed to oversee these systems in order to detect and prevent dangerous actions. However, current state-of-the-art monitors suffer from four persistent failure modes:...
Astra Linux – Vulnerability in Tomcat9
Path Equivalence: The use of ‘file.Name’ an internal dot notation can lead to Remote Code Execution, information disclosure, or the addition of malicious content to uploaded files via the write-enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-...
CLEANSTART-2026-SI92815 Several components in Spring Security compare security-sensitive values using standard string equality (String
Security vulnerability affects the rundeck package. Several components in Spring Security compare security-sensitive values using standard string equality String...
Beyond Predefined Sinks: Security-Aware Dependency Analysis for LLM Agents
Large language model LLM-based agents increasingly connect model-generated decisions to security-sensitive software capabilities such as command execution, filesystem access, network communication, browser control, and external tools. Existing analyses often use predefined sensitive operations as...
CVE-2026-69214
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware stores a response cookie’s Domain attribute without checking that it domain-matches the host that supplied the cookie or rejecting public suffixes. A malicious or compromised server...
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Overview crypto-js is a library of crypto standards. Affected versions of this package are vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the WordArray.random function. An attacker can recover security-sensitive values by enumerating the reduced output space of...
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Overview org.webjars.npm:crypto-js is a library of crypto standards. Affected versions of this package are vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the WordArray.random function. An attacker can recover security-sensitive values by enumerating the reduced...
CVE-2026-12819 DVP-12SE Missing Authentication and Unauthorized Write access Vulnerability
Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions...
CVE-2026-12819
Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions...
CVE-2026-12819: Missing Authentication for Critical Function
Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions...
GHSA-R5RP-J6WH-RVV4 Hono: Non-breaking space prefix bypass in cookie name handling in getCookie()
Summary A discrepancy between browser cookie parsing and parse handling allows cookie prefix protections to be bypassed. Cookie names that are treated as distinct by the browser may be normalized to the same key by parse, allowing attacker-controlled cookies to override legitimate ones. Details...
Cross-site Scripting (XSS)
Angular is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to internationalization of security-sensitive attributes bypassing Angular’s sanitization when combined with untrusted data binding, which allows an attacker to inject malicious scripts...
UBUNTU-CVE-2026-32635
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.3, 21.2.4, 20.3.18, and 19.2.20, a Cross-Site Scripting XSS vulnerability has been identified in the Angular runtime and compiler. It occurs whe...
EUVD-2005-0299
Malware in sbrugna...
EUVD-2016-6037
Malware in sbrugna...
EUVD-2019-8653
Malware in sbrugna...
EUVD-2021-0808
Malware in sbrugna...
EUVD-2007-2740
Malware in sbrugna...