clr

CLR П роверка в ремени жизни и других у точняющих типов для Zig Видео: https://www.youtube.com/watch?v=mf0WzTOe-40 Спонсорство: https://buymeacoffee.com/dnautics обсуждение на hn: https://news.ycombinator.com/item?id=42923829 обсуждение на lobste.rs:...

nano-analyzer

Nano-analyzer Un scanner de vulnérabilités zero-day minimal propulsé par LLM parAISLE. Prototype de recherche à des fins de démonstration. Il s'agit d'un harnais simple et monofichier capable de détecter de véritables vulnérabilités zero-day. Notez qu'il s'agit d'un prototype, orienté vers les bu...

CVE-2026-79285

CVE-2026-79285 affects ANGLE in Google Chrome on Windows , prior to version 152.0.7977.65 . The root cause is an uninitialized resource , which allows a remote attacker to obtain cross-origin data by delivering a crafted HTML page. The Chromium project rated this as Medium severity. Users should ...

CVE-2015-8710

Reproducteur Remerciements à Mike Dalessio, Francois Chagnon, Florian Weingarten et Jun Kokatsu. Voir BZ 746048 Compilation sous Linux root@kitploit: $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2...

CVE-2026-74710

A flaw was found in the Linux kernel's AFXDP eXpress Data Path component. This vulnerability arises because the AFXDP mechanism accepts a transmit TX metadata length that is smaller than required, allowing the kernel to read beyond its designated memory area. An attacker could potentially exploit...

xmloxide

xmloxide Une réimplémentation pure en Rust de libxml2 — la bibliothèque d'analyse XML/HTML de facto standard dans le monde open-source. libxml2 est officiellement devenu non maintenu en décembre 2025 avec des problèmes de sécurité connus. xmloxide vise à être un remplacement sûr en mémoire et hau...

MiracleLinux 9 : thunderbird-140.13.0-1.el9_8.ML.1 (AXSA:2026-1625:19)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1625:19 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

ROOT-OS-DEBIAN-11-CVE-2026-73072 CVE-2026-73072 in vim - Patched by Root

Root has patched CVE-2026-73072 in the vim package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-74667 net/packet: reset the MAC header on the packet-socket transmit path

In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packetparseheaders resets the MAC header only for a SOCKRAW frame whose socket did not bind a protocol. A protocol-bound SOCKRAW socket, any SOCKDGRAM frame, and...

CVE-2026-39113

CVE-2026-39113: Переполнение буфера в куче в опциональном расширении SQLAR для SQLite Executive Summary CVE-2026-39113 — это переполнение буфера в куче в опциональном расширении SQLAR для SQLite. В приложении, загрузившем это расширение, атакующий, способный вызвать sqlaruncompress с управляемым...

Chromium: CVE-2026-76043 Incorrect calculation in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

sinter

Sinter Sinter is a 100% user-mode endpoint security agent for macOS 10.15 and above, written in Swift. Sinter uses the user-mode EndpointSecurity API to subscribe to and receive authorization callbacks from the macOS kernel, for a set of security-relevant event types. The current version of Sinte...

CVE-2026-61711 vulnerabilities

Vulnerabilities for packages: podman, scorecard, guac, kaniko, conftest, kubescape...

MINI-476C-8RP5-9R79

Bulletin has no description...

ROOT-OS-DEBIAN-11-CVE-2026-34502 CVE-2026-34502 in apr-util - Patched by Root

Root has patched CVE-2026-34502 in the apr-util package for Root:Debian:11. Multiple fixed versions available...

OESA-2026-3455 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: xfs: remove xfsattrleafhasname The calling convention of xfsattrleafhasname is problematic, because it returns a NULL buffer when xfsattr3leafread fails, a valid...

GO-2026-6196 vulnerabilities

Vulnerabilities for packages: telegraf...

UBUNTU-CVE-2026-62377

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heifcontextreadfrommemory can leave the context with no registered sequence tracks and crash when heifcontextgettrackctx, 0 is called. HeifContext::gettrack in libheif/context.cc...

block_buffer: panic corrupts inline buffer position

Summary A caught panic may leave the cursor position of EagerBuffer or ReadBuffer in a corrupted state; this in turn allows out-of-bounds reads/writes. Details & PoC The following two tests fail miri: rust cfgmiri test fn eagerdigestblockspaniccorruptsinlineposition // EagerBuffer stores its curs...

CVE-2026-75142

FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer libavformat/mpegenc.c. When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow...