Benchmarking-Agent-Architectures

Benchmarking Agent Architectures for LLM-Based Exploit Gener...

gstreamer-plugins-ugly: GStreamer: Arbitrary code execution via ASF file processing

A flaw was found in GStreamer. This heap-based buffer overflow vulnerability in the ASF Demuxer component allows a remote attacker to execute arbitrary code. The issue arises from insufficient validation of user-supplied data length when processing stream headers within ASF Advanced Systems Forma...

CVE-2026-34519 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, open-webui, checkov, dask-kubernetes, airflow, kubeflow-pipelines-visualization-server, kserve...

CritBench: A Framework for Evaluating Cybersecurity Capabilities of Large Language Models in IEC 61850 Digital Substation Environments

The advancement of Large Language Models LLMs has raised concerns regarding their dual-use potential in cybersecurity. Existing evaluation frameworks overwhelmingly focus on Information Technology IT environments, failing to capture the constraints, and specialized protocols of Operational...

From Incomplete Architecture to Quantified Risk: Multimodal LLM-Driven Security Assessment for Cyber-Physical Systems

Cyber-physical systems often contend with incomplete architectural documentation or outdated information resulting from legacy technologies, knowledge management gaps, and the complexity of integrating diverse subsystems over extended operational lifecycles. This architectural incompleteness...

Linux Distros Unpatched Vulnerability : CVE-2026-33816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory-safety vulnerability in github.com/jackc/pgx/v5. CVE-2026-33816 Note that Nessus relies on the presence of the package as reported by the vendor. C...

Linux Distros Unpatched Vulnerability : CVE-2026-5732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbi...

PT-2026-30802

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GENESIS64 versions prior to 10.97.3 Mitsubishi Electric ICONICS Suite versions prior to 10.97.3 Mitsubishi Electric MobileHMI versions prior to 10.97.3 Mitsubishi Electric Hyper Historian versions prior to 10.97.3 Mitsubish...

Linux Distros Unpatched Vulnerability : CVE-2026-28389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary:...

Linux Distros Unpatched Vulnerability : CVE-2026-23459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iptunnel: adapt iptunnelxmitstats to NETDEVPCPUSTATDSTATS Blamed commits forgot that vxlan/geneve use udptunnel6xmitskb which call iptunnelxmitstats...

CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6

CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6. A patched version of the package is available...

CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3

CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-34043 vulnerabilities

Vulnerabilities for packages: tileserver-gl, sqlpad, argo-workflows, kubeflow-katib...

CVE-2026-33175 vulnerabilities

Vulnerabilities for packages: py3-oauthenticator...

CVE-2026-34052 vulnerabilities

Vulnerabilities for packages: py3-jupyterhub-ltiauthenticator...

CVE-2026-35582

Unknown description...

ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems

Existing research on LLM agent security mainly focuses on prompt injection and unsafe input/output behaviors. However, as agents increasingly rely on third-party tools and MCP servers, a new class of supply-chain threats has emerged, where malicious behaviors are embedded in seemingly benign tool...

The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, and visionOS allows a hacker to trigger a service failure.

The vulnerability of the WebKit component in the Safari browser on macOS, iOS, iPadOS, and VisionOS operating systems is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dyld component in operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS allows attackers to execute arbitrary code.

The vulnerability of the dyld component in iOS, iPadOS, tvOS, watchOS, and macOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...