NDuckMink Arkon authorization issue vulnerability

The nduckmink arkon version 0.9.2 and earlier have an authorization issue vulnerability. This vulnerability stems from the by-id routing bypassing the canaccessdocument access control check in the app/routers/sources.py file. As a result, authenticated employees can call the plan, progress, PATCH...

CVE-2026-62553

...

CVE-2026-75837

creationtimestamp| type| source ---|---|--- 2026-08-18 12:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mte6petjve2t 2026-08-18 14:08:10+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtefck2d542b 2026-09-17 22:32:09+00:00| seen|...

CVE-2026-19844

creationtimestamp| type| source ---|---|--- 2026-08-14 18:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt2qgnnl262l...

Airbyte Panel Detection

Detects Airbyte open-source data integration panel and health API. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Airbyte data integration panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Airbyte Panel...

SingGuard-NSFA: Extensible Guardrails for Agentic AI Via Generative Reasoning and Real-Time Classification

We present nsfaguard, a guardrail framework for securing agentic AI systems against operational threats, such as prompt injection, sensitive information extraction, malicious code requests, dangerous tool misuse, and resource exhaustion. We first introduce the NSFA taxonomy, which organizes 185...

CVE-2026-60089

creationtimestamp| type| source ---|---|--- 2026-07-10 16:52:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcmcjbu2v27 2026-07-10 20:24:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcy4szvbc27...

Google Chrome: Input validation error vulnerability

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.115 contained a vulnerability related to input validation errors. This vulnerability stemmed from insufficient validation for untrusted inputs in the Network component. It could allow remote...

Data Agents under Attack: Vulnerabilities in LLM-Driven Analytical Systems

Data agents integrate LLM-driven reasoning with relational data access, executable analytical tools, and multi-step workflow orchestration, making them increasingly central to enterprise analytics. This integration introduces new security vulnerabilities across data resources, database execution,...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability. This vulnerability stemmed from the incomplete initialization of the Dawn component, which could allow remote attackers to exploit the vulnerability through...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper SVG implementation. A remote attacker could exploit this vulnerability to leak cross-source data through specially crafted HTML...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability. This vulnerability stemmed from an issue with the ANGLE component where uninitialized variables were used, which could allow remote attackers to exploit the...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper implementation of extensions. A remote attacker could exploit this vulnerability to leak cross-source data through specially...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper handling of Media objects. A remote attacker could exploit this vulnerability to leak cross-source data through specially craft...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability caused by improper handling of payments. This vulnerability could allow local attackers to leak cross-source data through specially crafted...

Google Chrome: Input validation error vulnerability

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a vulnerability related to input validation. This vulnerability originated from improper implementations in WebRTC, and it could allow attackers from privileged network locations to leak...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability caused by improper Media implementation. This vulnerability could allow remote attackers to leak cross-source data through specially crafted HTML pages...

Google Chrome: Input validation error vulnerability

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a vulnerability related to input validation. This vulnerability stemmed from insufficient trust-based input validation in the Dawn component, which could allow remote attackers to exploit...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability. This vulnerability stemmed from the improper initialization of ANGLE, which could allow remote attackers to exploit the vulnerability through specially...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper implementation of the Media component. Remote attackers could exploit this vulnerability to leak cross-source data through...