… 21 Comments A security disclosure has been made public today for a yet-to-be-patched arbitrary code execution vulnerability with the KDE Plasma desktop. Open-source developer Kimiblock discovered an arbitrary code execution exploit for Plasma that can break sandboxes. …
… In turn this could ultimately lead to arbitrary root code execution. …
… At the beginning of the year, vm2 was impacted by another critical sandbox escape flaw that could lead to arbitrary code execution on the underlying host system, tracked as CVE-2026-22709 . …
Microsoft fixes AutoGen Studio flaw that enabled code execution By Bill Toulas June 22, 2026 01:28 PM A vulnerability chain dubbed AutoJack in Microsoft’s AutoGen Studio interface for prototyping AI agents could let attackers manipulate an agent into executing arbitrary commands on its host system … …
Hi HN!I've been spending the past month on PAI, a Linux-esque harness for a personal assistant AI for your Mac. Instead of giving a chatbot a bunch of tools, I wanted to just drop the LLM into a terminal and see how it'd…
HortusFox v5.8 released I'm proud to announce the new version 5.8 of HortusFox. Along with this release, there have been some other changes made that I want to address here as well. What is HortusFox? HortusFox is a self…
Hey friends. I'd like to share a project that's dear to me. fenic is a dataframe API with LLMs added as first-class citizens, a classic lazy dataframe API extended with new operators that are backed by LLMs.What this get…
… "This allows them to fully sidestep the SPRR and JIT Cage mitigations via thread state manipulation and achieve arbitrary code execution within the WebContent process," iVerify's Matthias Frielingsdorf and Mateusz Krzywicki wrote. …
… The issue is due to Flatpak portal accepting paths in the sandbox-expose options that can be app-controlled symlinks pointing at arbitrary paths. Due to this apps can access all host files and can be used as a primitive for gaining code execution in the host context. …
… Safetensors aims to help mitigate arbitrary code execution risks and more. …
… Here are the full patch notes: Fix a complete sandbox escape which leads to host file access and code execution in the host context CVE-2026-34078 Prevent arbitrary file deletion on the host filesystem CVE-2026-34079 Prevent arbitrary read-access to files in the system-helper context GHSA-2fxp-43j9… …
… "CVE-2026-34197 is a remote code execution vulnerability in Apache ActiveMQ Classic that has been hiding in plain sight for 13 years," Sunkavally said. …
Microsoft patches Exchange Server zero-day exploited in attacks By Sergiu Gatlan June 10, 2026 09:44 AM Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting XSS attacks targeting Outlook Web … …
