/
attack_type:deserialization × latest_source_host:f5.com × limpar

Resultados

2 casos · pág. 1/1

f5.com · medium

F5 Labs releases canary exploit tool for Apache Parquet Java CVE-2025-30065 (CVSS 10) and assesses real-world risk as limited

F5 Labs published a "canary exploit" generator for CVE-2025-30065, a CVSS 10.0 flaw in the Apache Parquet Java parquet-avro Maven module. The tool lets defenders test whether their environments are vulnerable and confirm that patches and configuration are effective. F5's analysis finds the flaw far less severe than the CVSS score and earl…

f5.com · exploit público high

F5 Labs: Persona Bullying jailbreak and LangChain serialization injection flaw (CVE-2025-68664) show AI attacks converging with classic exploits

F5 Labs' January 2026 AI security roundup covers two attack developments: the Persona Bullying jailbreak and a critical LangChain serialization injection vulnerability (CVE-2025-68664) reachable through prompt injection. Persona Bullying applies human social-engineering tactics such as gaslighting, ridicule and social pressure to LLMs con…