Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)

Redis has patched a use-after-free in its blocking-client code that lets an authenticated user run arbitrary OS commands on the machine hosting the database. The flaw was found by an autonomous AI tool built to hunt bugs in large codebases. Tracked as CVE-2026-23479, the flaw was introduced in...

Astra Linux – Vulnerability in Linux

The fs/nfs/nfs4client.c file in the Linux kernel before version 5.13.4 has an incorrect connection-setup ordering. This allows operators of remote NFSv4 servers to cause a denial of service termination of services, by arranging for those servers to become unreachable during trunking detection...

CVE-2026-44407

A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service...

Flowise 安全漏洞

Flowise is an open-source tool developed by FlowiseAI, designed for easily building LLM applications. Versions of Flowise prior to 3.0.13 contained security vulnerabilities. These vulnerabilities stemmed from using an HTTP client that allowed arbitrary x-request-from headers, which could enable...

cpython: Excessive read buffering DoS in http.client

A flaw was found in the http.client module in the Python standard library. When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This issue allows a malicious server to cause the client to read large amounts of data into...

cpython: Excessive read buffering DoS in http.client

A flaw was found in the http.client module in the Python standard library. When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This issue allows a malicious server to cause the client to read large amounts of data into...

CVE-2024-56838

CVE-2024-56838 affects Siemens RUGGEDCOM ROX II family (and ROX MX5000/ROX RX1400/1500/1510/1511/1512/1524/1536/ROX RX5000) with versions before 2.17.0. The SCEP client used for secure certificate enrollment fails to validate multiple fields, enabling an attacker to execute arbitrary code with ro...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

EUVD-2025-33360

A password aging vulnerability in the RADIUS client of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to access the device without enforcing the required password change. Affected devices allow logins by users for whom the RADIUS server has responde...

EUVD-2017-3769

Malware in sbrugna...

EUVD-2017-3735

Malware in sbrugna...

EUVD-2019-3904

Malware in sbrugna...

EUVD-2016-7943

Malware in sbrugna...

EUVD-2019-2232

Malware in sbrugna...

EUVD-2016-7944

Malware in sbrugna...

EUVD-2021-1336

Malware in sbrugna...

EUVD-2021-7673

Malicious code in bioql PyPI...

EUVD-2022-15896

Malicious code in bioql PyPI...

CVE-2025-58135

CVE-2025-58135 concerns Zoom Workplace Clients for Windows. The vulnerability arises from improper action enforcement, enabling an unauthenticated attacker to disclose information via network access. Affected product family: Zoom Workplace Clients for Windows; root cause is improper enforcement o...

BIT-LIBPYTHON-2021-3737

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability...