attack_type:deserialization × criticity:high × limpar

Resultados

2 casos · pág. 1/1

f5.com · há 1d exploit público high

F5 Labs: Persona Bullying jailbreak and LangChain serialization injection flaw (CVE-2025-68664) show AI attacks converging with classic exploits

F5 Labs' January 2026 AI security roundup covers two attack developments: the Persona Bullying jailbreak and a critical LangChain serialization injection vulnerability (CVE-2025-68664) reachable through prompt injection. Persona Bullying applies human social-engineering tactics such as gaslighting, ridicule and social pressure to LLMs con…

CVE-2025-68664

yokai.hakaisecurity.io · há 1d high

Nine 0-days in HTML-to-PDF libraries: ReportLab RCE, ReLaXed RCE, WeasyPrint SSRF/LFR, mPDF, Dompdf and TCPDF flaws

Researcher Pedro Cruz (Hakai Security / The Hacking Club) disclosed nine vulnerabilities in widely used server-side PDF generation libraries, with a combined footprint of over 90 million monthly installs. The cases range from RCE (ReportLab, ReLaXed) through arbitrary file read and SSRF (WeasyPrint, Browsershot) to DoS and file/directory …

CVE-2024-28184 CVE-2025-68616 CVE-2026-55555