Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3....

CVE-2026-90717

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions

来源摘录 · NVD

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 a...

CVE-2026-87302

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

来源摘录 · NVD

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-86400

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-86397

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive ...

CVE-2026-84295

Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allo

来源摘录 · NVD / GitHub Advisory

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

CVE-2026-110186

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of

来源摘录 · NVD

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.

CVE-2026-107329

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to impro

来源摘录 · NVD

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec.

CVE-2026-107328

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to impro

来源摘录 · NVD

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.

CVE-2026-107327

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missi

来源摘录 · NVD

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

CVE-2026-104339

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutraliza

来源摘录 · NVD

An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state.

CVE-2026-107058

An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another us

来源摘录 · NVD / GitHub Advisory

PrivacyEvalClaw: A Tool-Augmented Deliberative Agent for Auditing Privacy Leakage in LLM Jailbreak Responses

Reliable evaluation is a critical bottleneck in privacy red-teaming of large language models (LLMs): determining whether

来源摘录 · arXiv cs.CR

What Victims Take Away: Attack Reuse and Defense Revision after Prompt-Injection Attacks

Attack logs and red-team reports show targets the attacks used against them, to help them repair their defenses. Prompt

来源摘录 · arXiv cs.CR

Detecting and Mitigating Query-Based System Prompt Leakage Attacks

Large Language Models (LLMs) rely on proprietary system prompts to enforce task directives, safety policies, and access

来源摘录 · arXiv cs.CR

BUSTA: Teaching Small Language Models to Reason About Binary Execution

Large Language Models (LLM) are increasingly applied to Reverse Engineering (RE) workflows. RE, however, differs from co

来源摘录 · arXiv cs.CR

Bringing Hardware Security Education to All: A Seamless Curriculum Integration Approach

Cybersecurity education has predominantly focused on software and network security, under the assumption that the underl

来源摘录 · arXiv cs.CR

A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with cert...

CVE-2026-28367

A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block ter

来源摘录 · NVD

Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.

CVE-2026-62015

Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.

来源摘录 · NVD / GitHub Advisory

Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.

CVE-2026-62016

Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.

来源摘录 · NVD / GitHub Advisory

Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.

CVE-2026-62131

Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.

来源摘录 · NVD / GitHub Advisory