Agentic AI for Autonomous Defense in Software Supply Chain Security: Beyond Provenance to Vulnerability Mitigation

The software supply chain attacks are becoming more and more focused on trusted development and delivery procedures, so the conventional post-build integrity mechanisms cannot be used anymore. The available frameworks like SLSA, SBOM and in toto are majorly used to offer provenance and traceabili...

PT-2025-53685

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A SQL injection issue exists in itsourcecode Student Management System 1.0. Manipulation of the ID argument in the /statistical.php file can lead to SQL injection. The attack can b...

CVE-2025-56333

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component...

EUVD-2025-205525

Malicious code in cryptozip PyPI...

CVE-2025-15150 PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow

A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0. Affected by this issue is the function MavlinkLogHandler::statelisting/MavlinkLogHandler::logentryfromid of the file src/modules/mavlink/mavlinkloghandler.cpp. The manipulation results in stack-based buffer overflow. The attack is only...

CVE-2025-15146

creationtimestamp| type| source ---|---|--- 2025-12-28 17:45:03+00:00| seen| https://bsky.app/profile/potato.software/post/3mb2urmxinu2p 2025-12-28 20:27:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb35v2qw2u2r...

CVE-2025-15135

creationtimestamp| type| source ---|---|--- 2025-12-28 12:28:46+00:00| seen| https://bsky.app/profile/potato.software/post/3mb2d4cebvj2p...

[SECURITY] Fedora 42 Update: gdu-5.32.0-1.fc42

Fast disk usage analyzer with console interface written in Go...

PT-2025-53647

Name of the Vulnerable Software and Affected Versions ZSPACE Z4Pro+ version 1.0.0440024 Description A flaw exists in ZSPACE Z4Pro+ that allows for command injection. The issue is located within the zfilev2 api open function, accessible through the /v2/file/safe/open endpoint of the HTTP POST...

CVE-2025-67450

Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the software package could perform arbitrary code execution . This security issue has been fixed in the latest version of EUC which is available on the Eaton download center...

CVE-2025-59887

Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the software package. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center...

BELL-CVE-2025-68743

Bulletin has no description...

BELL-CVE-2025-68726

Bulletin has no description...

BELL-CVE-2025-68377

Bulletin has no description...

BELL-CVE-2025-68731

Bulletin has no description...

BELL-CVE-2025-68351

Bulletin has no description...

BELL-CVE-2025-68350

Bulletin has no description...

BELL-CVE-2025-68370

Bulletin has no description...

BELL-CVE-2025-68355

Bulletin has no description...

CVE-2025-68952

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution RCE vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction 1-click. This issue has been...