42291 matches found
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a resource management vulnerability in Microsoft Windows. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windows 11...
file type 安全漏洞
File type is a file type detection tool developed by Sindre Sorhus. Versions of File type prior to 21.3.1 had security vulnerabilities. These vulnerabilities stemmed from the ASF file type detection parser, which might enter an infinite loop when processing specially crafted inputs, potentially...
Mitsubishi Electric CNC Series
RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to cause an out-of-bounds read, resulting in a denial-of-service condition in the affected products. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the exploitation...
ROS-20260310-73-0040
A vulnerability in the signature verification functions GOST DSA, EDDSA and ECDSA of the Nettle library is related to flaws in the cryptographic algorithms used. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by entering an invalid signature...
CVE-2026-28692
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MAT decoder uses 32-bit arithmetic due to incorrect parenthesization resulting in a heap over-read. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...
CVE-2026-28689
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write. This...
GHSA-W36G-F98M-WM99 vulnerabilities
Vulnerabilities for packages: grafana...
GHSA-C87W-642H-M97H vulnerabilities
Vulnerabilities for packages: trino, druid...
CVE-2025-59059 vulnerabilities
Vulnerabilities for packages: trino, druid...
poc-factory-sample-output
Prompt Injection Guardrails Introduction In the rapidly e...
CVE-2025-38262 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-38262 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38699 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-38699 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-47911 affecting package cni for versions less than 1.0.1-21
CVE-2025-47911 affecting package cni for versions less than 1.0.1-21. A patched version of the package is available...
CVE-2025-38617 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-38617 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-59059 vulnerabilities
Vulnerabilities for packages: trino, druid...
OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security
DARPA's AI Cyber Challenge AIxCC showed that cyber reasoning systems CRSs can go beyond vulnerability discovery to autonomously confirm and patch bugs: seven teams built such systems and open-sourced them after the competition. Yet all seven open-sourced CRSs remain largely unusable outside their...
Security Considerations for Multi-Agent Systems
Multi-agent artificial intelligence systems or MAS are systems of autonomous agents that exercise delegated tool authority, share persistent memory, and coordinate via inter-agent communication. MAS introduces qualitatively distinct security vulnerabilities from those documented for singular AI...
CVE-2026-3706
A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered t...