SEC-Bench Pro: Can Language Models Solve Long-Horizon Software Security Tasks?

Large language models LLMs now support automated software security tasks, including vulnerability discovery and proof-of-concept PoC generation. Existing benchmarks do not faithfully evaluate LLMs in real-world bug hunting scenarios because they rely on fuzzing harnesses, target-specific...

GHSA-536Q-MJ95-H29H OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage

Summary Browser press/type interaction routes missed complete navigation guard coverage. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.10 Impact Some browser press/type style interactions could trigger navigation without complete post-action SSRF...

OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage

Summary Browser press/type interaction routes missed complete navigation guard coverage. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.10 Impact Some browser press/type style interactions could trigger navigation without complete post-action SSRF...

EUVD-2026-16222

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race C++ UB triggered by an A 1-phase ↔ 3-phase switch request acswitchthreephaseswhilecharging during charging/waiting executes concurrently with the state machine loop. Version 2026.02.0 contains a patch...

Shelly Pro 3EM 缓冲区错误漏洞

Shelly Pro 3EM is a three-phase energy meter from Shelly USA. A buffer error vulnerability exists in Shelly Pro 3EM versions prior to 1.4.4, which stems from an out-of-bounds read that could result in an over-read of the buffer...

LLM Jailbreak Oracle

As large language models LLMs become increasingly deployed in safety-critical applications, the lack of systematic methods to assess their vulnerability to jailbreak attacks presents a critical security gap. We introduce the jailbreak oracle problem: given a model, prompt, and decoding strategy,...

The vulnerability of the microprogrammed software of the three-phase voltage control relay Harmony Control Relay RMNF22TB30 and the Harmony Timer Relay RENF22R2MMW allows a intruder to alter the device’s configuration.

The vulnerability of the microprogrammed voltage-controlled relays Harmony Control Relay RMNF22TB30 and Harmony Timer Relay RENF22R2MMW lies in errors during privilege management. Exploiting this vulnerability could allow an attacker to remotely alter the device’s configuration...

Toshiba VFAS3-4110PCE ASD Drive Detection

Binary data 757961.prm...

Toshiba VFAS3-4450PCE ASD Drive Detection

Binary data 757967.prm...

Toshiba VFAS3-4300PCE ASD Drive Detection

Binary data 757965.prm...

Toshiba VFAS3-4150PCE ASD Drive Detection

Binary data 757962.prm...

Mitsubishi QE81WH Energy Monitoring Module Detection

Binary data 751847.prm...

Toshiba VFAS3-4220PCE ASD Drive Detection

Binary data 757964.prm...

Toshiba VFAS3-4075PCE ASD Drive Detection

Binary data 757960.prm...

Toshiba VFAS3-4185PCE ASD Drive Detection

Binary data 757963.prm...

Toshiba VFAS3-4015PC ASD DriveE Detection

Binary data 757956.prm...

Toshiba VFAS3-4004PCE AS3 UL Type 12/IP55 Adjustable Speed Drive Detection

Binary data 757954.prm...

Toshiba VFAS3-4055PCE ASD Drive Detection

Binary data 757959.prm...

Toshiba VFAS3-4007PCE ASD Drive Detection

Binary data 757955.prm...

Toshiba VFAS3-4750PCE ASD Drive Detection

Binary data 757969.prm...