Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ceph: Fix for numops off-by-one when crypto allocation fails The movedirtyfolioinpagearray function may fail if the file is encrypted, if the dirty folio is not the first in the batch, and if it fails to allocate a bounce buffer ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/memfdluo: fixed the physical address conversion in the putfolios cleanup process. In the putfolios cleanup path of memfdluoretrievefolios: 1. khorestorefolio expects a physaddrt physical address, but receives a raw PFN...

ECHO-181B-3174-D33F

Bulletin has no description...

RLSA-2026:26456 Important: 389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: unbounded LDAP controls count in...

CVE-2026-10746

creationtimestamp| type| source ---|---|--- 2026-06-19 01:39:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mom7htenzk2x...

GCVE-2342-2026-1

creationtimestamp| type| source ---|---|--- 2026-06-19 01:06:38+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mom5lxuqbkg5...

PT-2026-51098

Name of the Vulnerable Software and Affected Versions py7zr versions prior to 1.1.3 Description A denial of service issue exists where a crafted .7z archive with a large numstreams value causes excessive CPU consumption. This occurs because the PackInfo. read function in archiveinfo.py uses an On...

PT-2026-51114

Summary The CartController defines a RateLimiter behavior that is only activated when the 'number' POST/GET parameter is explicitly provided. Details When an attacker submits coupon codes against the session-based cart without passing a 'number' parameter, no rate limiting is applied. This allows...

TLS Certificate Reuse Analyzer

Python-based TLS auditing utility that connects to multiple remote hosts, retrieves their presented TLS certificates, fingerprints each certificate, and compares those fingerprints to identify certificate reuse across systems. It also records basic TLS metadata such as protocol version, cipher...

Retro gaming fans are the new target for fake GitHub malware

Retro gaming fans should be careful with GitHub projects that claim to be tools or plugins for their consoles. Attackers can disguise ordinary computer malware as homebrew software, and the technique works against any retro platform with an active modding scene, not just one console. We recently...

MINI-H4MJ-253Q-5882

Bulletin has no description...

MINI-Q527-QC6F-6VPF

Bulletin has no description...

Siemens SIMATIC S7-1500 TM MFP NULL Pointer Dereference (CVE-2026-28388)

Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application...

EUVD-2026-37555

In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-32804

creationtimestamp| type| source ---|---|--- 2026-06-17 17:23:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moitcf5f5w2f 2026-07-23 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrcnf7csgh2u 2026-09-04 21:17:44+00:00| seen|...

CVE-2026-0057

In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

MINI-QCH2-6V23-Q4H9

Bulletin has no description...

ECHO-4AFD-6578-CE80

Bulletin has no description...

CVE-2026-0057

In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0057

In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...