<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-1241</title><description>Every new CWE-1241 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-82190: Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7</title><link>https://agentprime.io/advisories/CVE-2026-82190/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82190/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 18:54:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-82191: Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7</title><link>https://agentprime.io/advisories/CVE-2026-82191/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82191/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 18:50:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73576: Zimbra Collaboration: In Zimbra Collaboration (ZCS) before 10.1.17…</title><link>https://agentprime.io/advisories/CVE-2026-73576/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73576/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Aug 2026 15:26:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57869: Insecure direct object reference in MicroRealEstate</title><link>https://agentprime.io/advisories/CVE-2026-57869/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57869/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Jul 2026 05:24:38 GMT</pubDate><category>CVE</category></item><item><title>Keylime has a hardcoded attestation challenge nonce that allows replay attacks</title><link>https://agentprime.io/advisories/GHSA-q8w6-w55c-ccv5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-q8w6-w55c-ccv5/</guid><description>keylime &gt;=7.14.0, &lt;7.14.2, fixed in 7.14.2. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 14:42:46 GMT</pubDate><category>PyPI</category><category>keylime</category></item><item><title>Duplicate Advisory: Keylime has a hardcoded attestation challenge nonce that allows replay attacks</title><link>https://agentprime.io/advisories/GHSA-wc6p-4gwj-jcr8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-wc6p-4gwj-jcr8/</guid><description>keylime &gt;=7.14.0, &lt;7.14.2, fixed in 7.14.2. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 06 May 2026 12:30:28 GMT</pubDate><category>PyPI</category><category>keylime</category></item><item><title>CoreDNS Loop Detection Denial of Service Vulnerability</title><link>https://agentprime.io/advisories/GHSA-h75p-j8xm-m278/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-h75p-j8xm-m278/</guid><description>github.com/coredns/coredns &lt;1.14.2, fixed in 1.14.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Mar 2026 22:08:22 GMT</pubDate><category>Go</category><category>github.com/coredns/coredns</category></item><item><title>CVE-2025-13079: Popup Builder - Create highly converting, mobile friendly marketing popups. &lt;= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens</title><link>https://agentprime.io/advisories/CVE-2025-13079/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-13079/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 19 Feb 2026 03:25:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-32056: Anti-Theft Bypass for Infotainment ECU</title><link>https://agentprime.io/advisories/CVE-2025-32056/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32056/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Jan 2026 15:21:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4695: Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib</title><link>https://agentprime.io/advisories/CVE-2023-4695/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4695/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 01 Sep 2023 00:00:19 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>PHPServerMon PRNG has Insufficient Entropy</title><link>https://agentprime.io/advisories/GHSA-hc4j-7mqg-cxjj/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-hc4j-7mqg-cxjj/</guid><description>phpservermon/phpservermon &lt;3.6.0, fixed in 3.6.0. CVSS 2.6 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Nov 2022 12:00:20 GMT</pubDate><category>Packagist</category><category>phpservermon/phpservermon</category></item><item><title>Insufficient Entropy in PHPServerMon PRNG</title><link>https://agentprime.io/advisories/GHSA-97w9-gcc7-vr8g/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-97w9-gcc7-vr8g/</guid><description>phpservermon/phpservermon &lt;3.6.0, fixed in 3.6.0. CVSS 2.6 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Nov 2022 12:00:20 GMT</pubDate><category>Packagist</category><category>phpservermon/phpservermon</category></item><item><title>Use of Insufficiently Random Values in yiisoft/yii2-dev</title><link>https://agentprime.io/advisories/GHSA-hq3v-rg6f-6hx4/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-hq3v-rg6f-6hx4/</guid><description>yiisoft/yii2-dev &lt;2.0.43, fixed in 2.0.43. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Sep 2021 18:35:34 GMT</pubDate><category>Packagist</category><category>yiisoft/yii2-dev</category></item><item><title>Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev</title><link>https://agentprime.io/advisories/GHSA-wwvv-x5mq-h3jj/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-wwvv-x5mq-h3jj/</guid><description>yiisoft/yii2-dev &lt;2.0.43, fixed in 2.0.43. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Sep 2021 18:35:26 GMT</pubDate><category>Packagist</category><category>yiisoft/yii2-dev</category></item><item><title>CVE-2016-10180: An issue was discovered on the D-Link DWR-932B router.</title><link>https://agentprime.io/advisories/CVE-2016-10180/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2016-10180/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Jan 2017 04:24:00 GMT</pubDate><category>CVE</category></item></channel></rss>