Dell PowerFlex Manager encryption vulnerability (CNVD-2026-26082)

Dell PowerFlex Manager is a software-defined storage management platform developed by the American company Dell. Versions of Dell PowerFlex Manager prior to 4.5.1.1 contained security vulnerabilities. Attackers could exploit these vulnerabilities to carry out man-in-the-middle attacks using DNS...

SUSE-SU-2026:2685-1 Security update for openCryptoki

This update for openCryptoki fixes the following issue: - CVE-2026-40253: malformed BER-encoded cryptographic objects can lead to information disclosure and denial of service bsc1262283...

Important: Red Hat Security Advisory: postgresql:13 security update

An update for the postgresql:13 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...

Top Google Security Staff Warn Search Data Could Be Hacked if EU Rules Change

Europe’s pro-competition proposals could see Google Search and Android systems opened up. The company claims there are serious privacy flaws...

hwpoc

Vulnerability Database for Intrusion Prevention Systems This...

Your Space Is My Zone: Demystifying the Security Risks of AI-Powered Applications on Pre-Trained Model Hubs

AI-powered Applications AI-Apps, hosted on platforms such as Hugging Face, are democratizing access to pre-trained models through online inference and fine-tuning services. While lowering AI adoption barriers, these platforms introduce an unexplored attack surface, as AI-Apps are often developed ...

The vulnerability of the Core server component of Oracle HTTP Server allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Core server component of Oracle HTTP Server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the device through HTTP requests...

The vulnerability of the Microsoft Dynamics 365 resource planning software relates to deficiencies in access control, allowing an intruder to increase their privileges.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the Core component of the Oracle Identity Manager Connector, which allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Core component of the Oracle Identity Manager Connector relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device through HTTP requests...

EulerOS 2.0 SP15 : libarchive (EulerOS-SA-2026-2486)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of...

EulerOS 2.0 SP15 : binutils (EulerOS-SA-2026-2435)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The...

Relyra SAML SignatureValue not cryptographically verified -> authentication bypass

Summary Relyra 1.0.0 and 1.1.0 accept forged SAML signatures because SignatureValue was not cryptographically verified before the library returned a successful authentication result. Details In 1.0.0 and 1.1.0, the XMLDSig trust boundary was incomplete. :publickey.verify over the exclusive-C14N...

ROS-20260626-73-0004

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

webkitgtk: An app may be able to access sensitive user data

A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash...

ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories

It’s dumb out there again. This week has the usual smell of prod on fire and nobody wanting to admit who left the door open — old creds still working, trusted apps doing sketchy crap, browser tricks jumping the fence, and “normal” workflows turning into phishing pipes because apparently email was...

Multiple vulnerability found in Expat

Expat 2.8.2 was released yesterday. The key motivation for cutting a release and doing so now was getting security and non-security bugsfixes out to users. On the security side, 13 vulnerabilities have been fixed: CVE-2026-50219: missing control flow integrity checks CVE-2026-56131: missing contr...

PT-2026-52195

Name of the Vulnerable Software and Affected Versions GitLab EE versions 16.4 through 18.11.5 GitLab EE versions 19.0 through 19.0.2 GitLab EE versions 19.1 through 19.1.0 Description Improper sanitization of user-supplied input allows an authenticated user with developer-role permissions to...

The vulnerability of the Run Control Management component in the PeopleSoft Enterprise CC Common Application Objects management tool allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Run Control Management component in the PeopleSoft Enterprise CC Common Application Objects management tool is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access t...

Vulnerability of the Cluster component: The NDB Operator technology for distributed data storage in MySQL NDB Cluster allows attackers to escalate their privileges and cause service failures.

Vulnerability of the Cluster component: The NDB Operator technology for distributed data storage in MySQL NDB Cluster is vulnerable due to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges and cause service failures using the HTTP...