45447 matches found
kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers
A flaw was found in the Linux kernel's iwlwifi Intel Wireless WiFi driver. This vulnerability allows an attacker to cause an out-of-bounds memory access in the WiFi Block Acknowledgement BA session handlers. This occurs when the stamask value is zero, leading to an incorrect station ID calculatio...
WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones. The person being called does not have to answer or touch their phone for it to work, but the caller must already be one of their...
Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download
Agent-Zero v0.8.0 - 0.9.4 contains a path traversal caused by improper validation in /api/downloadworkdirfile.py, letting attackers access unauthorized files, exploit requires crafted request. id: CVE-2025-55523 info: name: Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download author: 0xAkoko...
cjose -- Use of Hard-coded Cryptographic Key
https://github.com/OpenIDC/cjose/security/advisories/GHSA-f6wf-pqg3-6wqq reports: OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. In versions 0.6.1 through 0.6.2.5, when cjose encrypts a JWE using an AES-CBC-HMAC content-encryption algorithm...
Update your browser: Security fix for Chrome zero-day CVE‑2026‑85046
News, Security Update your browser: Security fix for Chrome zero-day CVE‑2026‑85046 Share September 8th, 2026 Hi everyone! The latest patches to Opera’s browsers address several recent vulnerabilities, including a zero-day exploit CVE‑2026‑85046. We recommend updating your browsers to the latest...
PT-2026-88524
Name of the Vulnerable Software and Affected Versions OpenIDC/cjose versions 0.6.1 through 0.6.2.5 Description When encrypting a JSON Web Encryption JWE using AES-CBC-HMAC content-encryption algorithms A128CBC-HS256, A192CBC-HS384, or A256CBC-HS512 combined with any key-management algorithm that...
Security update for emacs
This update for emacs fixes the following issues: code execution upon opening arbitrary file bsc1275941. CVE-2026-77219: memory leak via the PBM/PPM/PGM image loader bsc1276264. CVE-2026-79992: zero-click local command execution via TRAMP bsc1275927. Patch Instructions: To install this SUSE updat...
SUSE-SU-2026:3993-1 Security update for emacs
This update for emacs fixes the following issues: - code execution upon opening arbitrary file bsc1275941. - CVE-2026-77219: memory leak via the PBM/PPM/PGM image loader bsc1276264. - CVE-2026-79992: zero-click local command execution via TRAMP bsc1275927...
MariaDB 3.4.0 < 3.4.10
The version of MariaDB installed on the remote host is prior to 3.4.10. It is, therefore, affected by a vulnerability as referenced in the GHSA-fmq9-qjxj-qpf7 advisory. - Impact In the Zero-Configuration SSL protocol, the MariaDB client must refuse sending clear-text password over unverified TLS...
ROS-20260907-73-0104
The vulnerability in gobgp is related to the assignment of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Benchmarking LLMs for Threat Level Determination
The fast progress of large language models LLMs opens new opportunities in the management of cyber threat intelligence, but their reliability for operational tasks remains unclear. In this work, we benchmark LLMs on the task of threat level determination. First, we construct a curated dataset...
ROS-20260907-73-0068
The vulnerability in freerdp3 is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053371)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053371 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets If a TCP socket is using TCPUSERTIMEOUT, and the other pee...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053202)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053202 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fbcvthperiod In fbfindmodecvt, iff mode-refresh someho...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073364)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073364 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count fflayoutalloclseg decodes the...
Skynet: Workflow-Level Anomaly Detection for Agentic AI Via Semantic and Structural Modeling
Agentic AI systems execute complex tasks through long-horizon workflows of planning, tool use, and multi-agent coordination. Task failures in these systems often originate from a single step, such as an injected prompt or a flawed plan, and are then amplified through downstream dependencies as th...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053241)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053241 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add 0 size check to mtkdrmgemobj Add a check to mtkdrmgeminit if we attempt to...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053368)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053368 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: avoid divide-by-zero on FBIOPUTVSCREENINFO Much like commit 19f953e74356 fbdev:...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053406)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053406 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: make apf token non-zero to fix bug In current async pagefault logic, when a page is...
