<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-649</title><description>Every new CWE-649 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping</title><link>https://agentprime.io/advisories/EEF-CVE-2026-95105/</link><guid isPermaLink="true">https://agentprime.io/advisories/EEF-CVE-2026-95105/</guid><description>cloak &gt;=0.1.0-pre, no fixed version yet. CVSS 8.2 (High). Published by OSV. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Oct 2026 08:37:56 GMT</pubDate><category>Hex</category><category>cloak</category></item><item><title>CVE-2026-105208: ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens</title><link>https://agentprime.io/advisories/CVE-2026-105208/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105208/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 04 Oct 2026 13:10:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-41351: Weak encryption on Funambol&apos;s cloud server</title><link>https://agentprime.io/advisories/CVE-2025-41351/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-41351/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Jan 2026 10:43:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-5323: fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking</title><link>https://agentprime.io/advisories/CVE-2025-5323/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-5323/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 May 2025 18:00:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10772: SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modification</title><link>https://agentprime.io/advisories/CVE-2024-10772/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10772/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Dec 2024 12:28:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-36279: Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in &quot;FreeFrom - the nostr client&quot; App versions prior to 1.3.5 for Android and iOS.</title><link>https://agentprime.io/advisories/CVE-2024-36279/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-36279/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Jun 2024 07:34:09 GMT</pubDate><category>CVE</category></item><item><title>Padding oracle attacks</title><link>https://agentprime.io/advisories/GHSA-3gp6-hhfw-4gqx/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-3gp6-hhfw-4gqx/</guid><description>org.owasp.esapi:esapi &lt;2.0GA, fixed in 2.0GA. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 13 Aug 2021 15:22:24 GMT</pubDate><category>Maven</category><category>org.owasp.esapi:esapi</category></item><item><title>CVE-2019-3730: RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an Error Message vulnerability, also known…</title><link>https://agentprime.io/advisories/CVE-2019-3730/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-3730/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Sep 2019 21:48:40 GMT</pubDate><category>CVE</category></item></channel></rss>