GHSA-C87W-642H-M97H vulnerabilities

Vulnerabilities for packages: trino, druid...

CVE-2025-59059 vulnerabilities

Vulnerabilities for packages: trino, druid...

poc-factory-sample-output

Prompt Injection Guardrails Introduction In the rapidly e...

CVE-2025-38699 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38699 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-47911 affecting package cni for versions less than 1.0.1-21

CVE-2025-47911 affecting package cni for versions less than 1.0.1-21. A patched version of the package is available...

CVE-2025-38617 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38617 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38262 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38262 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-59059 vulnerabilities

Vulnerabilities for packages: trino, druid...

Security Considerations for Multi-Agent Systems

Multi-agent artificial intelligence systems or MAS are systems of autonomous agents that exercise delegated tool authority, share persistent memory, and coordinate via inter-agent communication. MAS introduces qualitatively distinct security vulnerabilities from those documented for singular AI...

OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security

DARPA's AI Cyber Challenge AIxCC showed that cyber reasoning systems CRSs can go beyond vulnerability discovery to autonomously confirm and patch bugs: seven teams built such systems and open-sourced them after the competition. Yet all seven open-sourced CRSs remain largely unusable outside their...

CVE-2026-3706

A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered t...

CVE-2026-25674 vulnerabilities

Vulnerabilities for packages: label-studio, awx, authentik-fips...

CVE-2026-29063 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, gitlab-rails-ce, rancher-api-ui, vitess, gitlab-rails-ce-fips, arangodb, authentik, authentik-fips...

Anthropic and the Pentagon

OpenAI is in and Anthropic is out as a supplier of AI technology for the US defense department. This news caps a week of bluster by the highest officials in the US government towards some of the wealthiest titans of the big tech industry, and the overhanging specter of the existential risks posed...

Malicious code in @shenira/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c19428681ab141c5cbfe55488bba7fb3d752e39dcffc01da944544bc0b104b The package @shenira/libsignal-node was found to contain malicious code. Source: ghsa-malware...

CVE-2025-66566 vulnerabilities

Vulnerabilities for packages: debezium-connector-vitess, kafka, zipkin, debezium-connector-informix, debezium-connector-ibmi, debezium-connector-spanner, strimzi-kafka-operator, debezium, cassandra, sonarqube, debezium-connector-db2, spark...

CVE-2026-29068

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17...

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System (NVOS) operating systems allows attackers to increase their privileges.

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Supporting Artifact Evaluation with LLMs: A Study with Published Security Research Papers

Artifact Evaluation AE is essential for ensuring the transparency and reliability of research, closing the gap between exploratory work and real-world deployment is particularly important in cybersecurity, particularly in IoT and CPSs, where large-scale, heterogeneous, and privacy-sensitive data...

Linux Distros Unpatched Vulnerability : CVE-2026-23232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Revert f2fs: block cache/dio write during f2fsenablecheckpoint This reverts commit...