EUVD-2026-0697

A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Executing manipulation of the argument del can lead to sql injection. The attack can be executed remotely. The exploit has been made available t...

EUVD-2026-0696

REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts...

PT-2026-21772

Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.1 Description Caddy’s HTTP path request matcher is intended to be case-insensitive, but when the match pattern contains percent-escape sequences %xx it compares against the request's escaped path without lowercasin...

PT-2026-25989

Name of the Vulnerable Software and Affected Versions Tillitis TKey Client versions 1.2.0 and below Description The Tillitis TKey Client package, a Go package for a TKey client, contains a flaw in the tkeyclient Go module. Approximately 1 out of every 256 User Supplied Secrets USS are silently...

PT-2026-7016

Observable Timing Discrepancy vulnerability in Apache Shiro. This issue affects Apache Shiro: from 1., 2. before 2.0.7. Users are recommended to upgrade to version 2.0.7 or later, which fixes the issue. Prior to Shiro 2.0.7, code paths for non-existent vs. existing users are different enough, tha...

PT-2026-21773

Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.1 Description Caddy’s HTTP host request matcher is documented as case-insensitive, but becomes case-sensitive when configured with a large host list more than 100 entries due to an optimized matching path. An...

PT-2026-4919

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A flaw exists in GLib related to its Unicode case conversion implementation. An integer overflow can lead to memory corruption when processing specially crafted, large Unicode strings. This...

Exploring the Integration of Differential Privacy in Cybersecurity Analytics: Balancing Data Utility and Privacy in Threat Intelligence

To resolve the acute problem of privacy protection and guarantee that data can be used in the context of threat intelligence, this paper considers the implementation of Differential Privacy DP in cybersecurity analytics. DP, which is a sound mathematical framework, ensures privacy by adding a...

CVE-2023-54251

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: Limit TCATAPRIOATTRSCHEDCYCLETIME to INTMAX. syzkaller found zero division error 0 in divs64rem called from getcycletimeelapsed, where sched-cycletime is the divisor. We have tests in parsetaprioschedule so tha...

SUSE CVE-2023-54251

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: Limit TCATAPRIOATTRSCHEDCYCLETIME to INTMAX. syzkaller found zero division error 0 in divs64rem called from getcycletimeelapsed, where sched-cycletime is the divisor. We have tests in parsetaprioschedule so tha...

CVE-2023-54251

The CVE-2023-54251 issue is in the Linux kernel net/sched/taprio path, where TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME was cast inconsistently (s64 cycle_time vs s32 divisor) leading to a potential divide-by-zero in div_s64_rem() called from get_cycle_time_elapsed(). The fix preserves s64 for cycle_time t...

CVE-2023-54251 net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: Limit TCATAPRIOATTRSCHEDCYCLETIME to INTMAX. syzkaller found zero division error 0 in divs64rem called from getcycletimeelapsed, where sched-cycletime is the divisor. We have tests in parsetaprioschedule so tha...

CVE-2023-54228

In the Linux kernel, the following vulnerability has been resolved: regulator: raa215300: Fix resource leak in case of error The clkregisterclkdev allocates memory by calling vclkdevalloc and this memory is not freed in the error path. Similarly, resources allocated by clkregisterfixedrate are no...

CVE-2023-54209 block: fix blktrace debugfs entries leakage

In the Linux kernel, the following vulnerability has been resolved: block: fix blktrace debugfs entries leakage Commit 99d055b4fd4b "block: remove per-disk debugfs files in blkunregisterqueue" moves blktraceshutdown from blkreleasequeue to blkunregisterqueue, this is safe if blktrace is created...

CVE-2025-15351

creationtimestamp| type| source ---|---|--- 2025-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1202/ 2026-01-23 13:59:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3ucyyrrs2h 2026-01-23 14:20:25+00:00| seen|...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992392 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: vt6655: fix some erroneous memory clean-up loops In some initialization functions of thi...

PT-2025-54218

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description A flaw in FortiOS allows bypassing of multi-factor authentication MFA through manipulation of username case. This issue is currently being exploited. The exploitation involves tricking the...

CVE-2025-68943

creationtimestamp| type| source ---|---|--- 2025-12-26 04:54:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mauisc3sqs22...

ReSMT: An SMT-Based Tool for Reverse Engineering

Software obfuscation techniques make code more difficult to understand, without changing its functionality. Such techniques are often used by authors of malicious software to avoid detection. Reverse Engineering of obfuscated code, i.e., the process of overcoming obfuscation and answering questio...

CVE-2025-15076

creationtimestamp| type| source ---|---|--- 2025-12-25 06:32:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mas5rvcfhl2q 2025-12-26 14:53:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115786435135113749 2025-12-26 15:32:42+00:00| seen|...