CVE-2026-104912

The MISP platform contains an authorization flaw in its correlation handling during attribute searches, affecting versions prior to v2.5.48 . The root cause is that the system uses a stale distribution snapshot stored on the correlation row—which is a point-in-time copy lacking a published flag—i...

hermes-seagull

hermes-seagull !CIhttps://github.com/ly1123245599/hermes-...

Reversing the Clock: Layout-Aware Recovery of Design Intent from Clock Distribution Networks

Hardware reverse engineering supports competitive analysis and hardware assurance by recovering information about an integrated circuit IC from its physical implementation. While existing techniques primarily recover the gate-level netlist, which represents logical functionality, they often...

PT-2026-105666

These are all security issues fixed in the distribution-registry-3.1.1-9.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-104912: Missing Authorization

MISP contains an authorization flaw in its correlation handling during attribute searches. When a user performs an attribute search that triggers correlation lookups, the system authorized access to correlated attributes and events based on a stale distribution snapshot stored on the correlation...

CVE-2026-104019: Improper Neutralization of Special Elements used in an OS Command

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...

The vulnerability of the get_signing_key_from_jwt() function in the PyJWT library allows a attacker to trigger a denial-of-service attack.

The vulnerability of the getsigningkeyfromjwt function in the PyJWT library is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Quantum Key Distribution with Entanglement-Swapped Photons from a Quantum Emitter

Quantum key distribution QKD is a fundamental functionality of quantum networks. Extending its range requires quantum repeaters, a technology still under development and not yet demonstrated in combination with quantum cryptographic protocols. Here, we address the elementary operation of a viable...

Fedora 45 : docker-distribution (2026-13584cfe41)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-13584cfe41 advisory. - Update to release v3.1.2 - Resolves: rhbz2540024 - Resolves CVE-2026-41178: rhbz2515091 - Resolves CVE-2026-85747 - Upstream fixes and enhancement...

OPENSUSE-SU-2026:11957-1 distribution-registry-3.1.1-9.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-9.1 package on the GA media of openSUSE Tumbleweed...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790933161)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790933161 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CentOS Linux 8 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1790933563)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1790933563 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

EUVD-2026-90972

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw exists in the X.509 client certificate authenticator of Keycloak . When CRL Distribution Point checking is enabled, the server fails to properly validate file paths provided within a client certificate. This path traversal vulnerability allows an attacker to provide a specially crafted cer...

CVE-2026-103659

MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...

CVE-2026-103659

MISP versions prior to 2.5.48 are vulnerable to an authorization bypass within the event flattening feature. When a user requests an event with the flatten option enabled, the application removes Object containment from the query and returns object attributes as top-level attributes without re-ap...

CVE-2026-103659 MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes

MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...

EUVD-2026-90575

MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...