<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-159</title><description>Every new CWE-159 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>Tornado has cookie attribute injection via .RequestHandler.set_cookie</title><link>https://agentprime.io/advisories/GHSA-fqwm-6jpj-5wxc/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-fqwm-6jpj-5wxc/</guid><description>tornado &lt;6.5.5, fixed in 6.5.5. CVSS 7.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Apr 2026 06:31:31 GMT</pubDate><category>PyPI</category><category>tornado</category></item><item><title>CVE-2026-29106: SuiteCRM has blind XSS in return_id parameter</title><link>https://agentprime.io/advisories/CVE-2026-29106/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-29106/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 19 Mar 2026 23:02:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-2636: Denial of Service in Microsoft OS</title><link>https://agentprime.io/advisories/CVE-2026-2636/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-2636/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Feb 2026 18:57:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-61984: OpenBSD OpenSSH: ssh in OpenSSH before 10.1 allows control characters in usernames that originate from…</title><link>https://agentprime.io/advisories/CVE-2025-61984/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61984/</guid><description>CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Oct 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>RISC Zero Ethereum invalid commitment with digest value of zero accepted by Steel.validateCommitment</title><link>https://agentprime.io/advisories/GHSA-gjv3-89hh-9xq2/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-gjv3-89hh-9xq2/</guid><description>risc0-ethereum-contracts &lt;2.1.1, fixed in 2.1.1. CVSS 1.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Jun 2025 21:27:59 GMT</pubDate><category>crates.io</category><category>risc0-ethereum-contracts</category></item><item><title>CVE-2024-51500: Failure to check for packets from the broadcast address allows potential DDoS amplification attack in Meshtastic firmware</title><link>https://agentprime.io/advisories/CVE-2024-51500/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-51500/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 04 Nov 2024 23:00:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-21707: Special characters break path parsing in XML functions</title><link>https://agentprime.io/advisories/CVE-2021-21707/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21707/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Nov 2021 06:25:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-42375: busybox: An incorrect handling of a special element in Busybox&apos;s ash applet leads to denial of…</title><link>https://agentprime.io/advisories/CVE-2021-42375/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-42375/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 15 Nov 2021 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-29022: Host Header Injection allowing web cache poisoning attacks</title><link>https://agentprime.io/advisories/CVE-2020-29022/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-29022/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Feb 2021 15:08:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-1653: Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak</title><link>https://agentprime.io/advisories/CVE-2020-1653/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-1653/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Jul 2020 18:40:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-1648: Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet</title><link>https://agentprime.io/advisories/CVE-2020-1648/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-1648/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Jul 2020 18:40:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-1646: Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information.</title><link>https://agentprime.io/advisories/CVE-2020-1646/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-1646/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Jul 2020 18:40:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-9505: PrinterLogic Print Management Software does not sanitize special characters</title><link>https://agentprime.io/advisories/CVE-2019-9505/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-9505/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 May 2019 14:48:20 GMT</pubDate><category>CVE</category></item></channel></rss>