[SECURITY] Fedora 45 Update: perl-Dancer2-2.2.1-1.fc45

Dancer2 is the new generation of Dancer, the lightweight web-framework for Perl. It is a complete rewrite based on Moo and is meant to be easy and fun...

CVE-2026-102507: Out-of-bounds Read

Sliver C2 framework version 1.7.7 and earlier contains an unhandled panic vulnerability in the operator gRPC handler that allows an attacker controlling a compromised implant to crash the entire teamserver by returning a malformed or empty Download response. Attackers can send zero-length or 1-3...

PT-2026-108422

Security vulnerability affects the apache-hive package. Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE...

ROS-20260929-73-0081

The vulnerability of the checkcommandsizeinblocks function in the drivers/usb/gadget/function/fmassstorage.c file of the Linux device driver framework is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260929-73-0003

The vulnerability of the pegasusprobe function in the drivers/input/tablet/pegasusnotetaker.c module of the Linux device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the...

LogiC-Diff: Embedding Security Properties into AI-Enabled Cyber-Physical Systems

AI-enabled Cyber-Physical Systems CPS are highly vulnerable to adversarial and anomalous inputs, where small perturbations can induce cascading errors and unsafe control actions. Existing approaches, such as rule-based filtering, training-time regularization, or diffusion-based reconstruction,...

ROS-20260929-73-0098

The vulnerability of the gsusbreceivebulkcallback function in the drivers/net/can/usb/gsusb.c module of the Linux network device driver framework is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause...

ROS-20260929-73-0038

The vulnerability of the eemunwrap function in the drivers/usb/gadget/function/feem.c file of the Linux operating system’s USB gadget driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

One Pipeline Does Not Fit All: TAILOR, a Type- and State-Aware Framework for CVE Reproduction

Growing vulnerability disclosure and widespread software reuse increase security teams' need for reproducible evidence to diagnose vulnerabilities, validate patches, and build regression tests. Producing such evidence at scale requires automated end-to-end CVE reproduction. Existing methods...

comprehensive-cyber-attack-simulation

Comprehensive Cyber Attack Simulation Overview An end-to-...

The vulnerability of the Windows Imaging Component (WIC) framework in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Imaging Component WIC framework in the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the RedisArrayAggregator component in the networking application development framework, developed using Netty protocols, allows a attacker to cause service interruptions.

The vulnerability of the RedisArrayAggregator component in the networking application development framework, used for servers and client protocols based on Netty, involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruption...

ROS-20260928-73-0110

The vulnerability of the sddr55writedata function in the drivers/usb/storage/sddr55.c module of the Linux operating system’s device driver framework is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260928-73-0098

The vulnerability of the ffsfuncepsenable function in the drivers/usb/gadget/function/ffs.c file of the Linux device driver framework is related to the swapping of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

ROS-20260928-73-0086

The vulnerability of the btusbdisconnect function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver framework is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20260928-73-0093

The vulnerability of the bcsprecv function in the drivers/bluetooth/hcibcsp.c module of the Linux Bluetooth device driver framework is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

[SECURITY] Fedora 45 Update: mingw-gstreamer1-1.28.7-1.fc45

GStreamer is a streaming-media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plug-in-based architecture means that new data types...

CVE-2026-100681

Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability in the Microsoft Teams webhook endpoint that accepts forged Bot Framework activities with arbitrary serviceUrl values. Attackers can submit a crafted POST request to inject an...

CVE-2022-22965

CVE-2022-22965 Spring4Shell es una vulnerabilidad RCE crítica en el Spring Framework de Java y es una de las tres vulnerabilidades relacionadas publicadas el 30 de marzo...

EUVD-2026-87654

Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability in the Microsoft Teams webhook endpoint that accepts forged Bot Framework activities with arbitrary serviceUrl values. Attackers can submit a crafted POST request to inject an...