Use of Web Link to Untrusted Target with window.opener Access

Overview jupyterlab is a JupyterLab computational environment. Affected versions of this package are vulnerable to Use of Web Link to Untrusted Target with window.opener Access via the link rendering process in LaTeX typesetters for Markdown files and cells. An attacker can potentially manipulate...

Apollo Studio Embeddable Explorer & Embeddable Sandbox 跨站请求伪造漏洞

Apollo Studio Embeddable Explorer & Embeddable Sandbox is an open source vectorization tool for Apollo GraphQL. A cross-site request forgery vulnerability exists in Apollo Studio Embeddable Explorer & Embeddable Sandbox, which stems from a lack of source validation when client code handles the...

PT-2025-39478

Federal agencies have 1 day to patch critical Cisco ASA firewall vulnerabilities CVE-2025-30333 and CVE-2025-20362 exploited by advanced hackers in the ArcaneDoor campaign linked to Chinese state actors. CiscoASA ArcaneDoor China https://t.co/SwRp9rx7TT...

Linux Distros Unpatched Vulnerability : CVE-2022-50366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powercap: intelrapl: fix UBSAN shift-out-of-bounds issue When value timeunit, the parameter of ilog2 will be zero and the return value is -1. u64-1 is too large...

CVE-2025-58766

Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker...

CVE-2025-7702 Open Redirect in PUSULA's Manageable Email Sending System

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Pusula Communication Information Internet Industry and Trade Ltd. Co. Manageable Email Sending System allows Exploiting Trust in Client. This issue affects Manageable Email Sending System: from =2025.06 before 2025.08.06...

Time-of-Check Time-of-Use Attacks Against LLMs

This is a nice piece of research: "Mind the Gap: Time-of-Check to Time-of-Use Vulnerabilities in LLM-Enabled Agents".: Abstract: Large Language Model LLM-enabled agents are rapidly emerging across a wide range of applications, but their deployment introduces vulnerabilities with security...

SUSE CVE-2022-50366

In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: fix UBSAN shift-out-of-bounds issue When value timeunit, the parameter of ilog2 will be zero and the return value is -1. u64-1 is too large for shift exponent and then will trigger shift-out-of-bounds: shift...

CVE-2025-58766

Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker...

CVE-2025-58766 Dyad Vulnerable to Remote Code Execution via Top-level Navigation in Preview Window

Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker...

CVE-2025-58766 Dyad Vulnerable to Remote Code Execution via Top-level Navigation in Preview Window

Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker...

CVE-2025-58766

Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker...

CVE-2025-58766

Dyad CVE-2025-58766 affects Dyad

CVE-2025-58766 Dyad Vulnerable to Remote Code Execution via Top-level Navigation in Preview Window

Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker...

UBUNTU-CVE-2022-50366

In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: fix UBSAN shift-out-of-bounds issue When value timeunit, the parameter of ilog2 will be zero and the return value is -1. u64-1 is too large for shift exponent and then will trigger shift-out-of-bounds: shift...

CVE-2022-50366 powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue

In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: fix UBSAN shift-out-of-bounds issue When value timeunit, the parameter of ilog2 will be zero and the return value is -1. u64-1 is too large for shift exponent and then will trigger shift-out-of-bounds: shift...

PT-2025-38242

Name of the Vulnerable Software and Affected Versions: Dyad versions prior to 0.20.0 Description: Dyad is a local AI app builder susceptible to arbitrary code execution on users' systems. The issue affects the application’s preview window functionality and can bypass Docker container protections...

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm, which allows a hacker to trigger a service failure.

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fly-wm window graphical manager, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the fly-wm window graphical manager is related to reading data beyond the allowable buffer limit. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fly-kompmgr utility for the fly-wm window management application allows a hacker to cause a service failure.

The vulnerability of the fly-kompmgr utility for the fly-wm window manager is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...