CVE-2026-76343: Improper Neutralization of Special Elements used in an SQL Command

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query Language SQL queries through the Data Orchestration jobs endpoint, allowing for access to substantially all data stor...

GO-2023-1900 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-5148 vulnerabilities

Vulnerabilities for packages: argo-workflows, argo-workflows-fips, kubeflow-pipelines-fips, kubeflow-pipelines, kubeflow-pipelines-driver-fips...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, emissary, docker-machine-driver-harvester, mesosphere-vsphere-csi, rancher-fleet, cloud-provider-gcp-cloud-controller-manager, yunikorn-k8shim, vcluster, rancher-system-agent...

GO-2025-4023 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, overmind, flannel-cni-plugin, aws-flb-cloudwatch, gcsfuse, speedtest-go, spqr, newrelic-nri-kube-events, fuse-overlayfs-snapshotter, gosu, vertical-pod-autoscaler, docker-cli, cargobump, sftpgo, dask-gateway, percona-server-mongodb-operator,...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.6 security update

Important: Red Hat OpenShift GitOps v1.19.6 security update An update is now available for Red Hat OpenShift GitOps...

Eopi-Hunt-Skill

Eopi-Hunt-Skill Authorized security research toolkit comb...

Agentic AI Security: The Chatbot Era Is Already Over

This is Post 1 of a three-part series. Continue toPost 2: Generative AI Security: Why AI Needs a New Kind of Security, then continue to Post 3: OWASP LLM Top 10: What Comes Next – Agentic & MCP. There is a diagram most security teams still carry in their heads when they think about AI. A user tal...

Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams

Las Vegas, United States, 4th August 2026, CyberNewswire...

Decepticon-NavMAX

!Englishhttps://img.shields.io/badge/Language-English-blue?s...

Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...

PYSEC-2026-642 Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...

sentinel

Sentinel — Agentic Code & System Quality Guardian Production-...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: rancher, zarf, kubescape, sops, witness, crossplane-provider-azure-authorization, pulumi-kubernetes-operator, mods, loki, ksops, guac, gomplate, buildkitd, docker-machine-driver-harvester, flux-notification-controller, kargo, cilium-cli, pulumi, terraform-provider-tl...

Beyond the benchmark: Advancing security at AI speed

In this article 1. From the lab into the pipeline 2. This month’s set of discoveries 3. Beyond the headline: What the engineering work taught us 4. Where we go next 5. Defense at AI speed 6. Learn more Every vulnerability has two clocks running. One belongs to the defender racing to find it; the...

overflow_exploit_framework

kernel-research — Framework CVE overflow Usage éducatif uni...

EUVD-2026-36087

In Splunk SOAR Security Orchestration, Automation, and Response versions below 8.5.0, an unauthenticated attacker could inject American National Standards Institute ANSI escape codes into SOAR application log files through specially crafted HTTP request paths, which a terminal emulator might...

Containers on fire: from container escapes to supply chain attacks

Introduction Modern infrastructures universally rely on containerization to deploy applications, scale services, and build cloud platforms. The use of Docker, Kubernetes, and similar technologies has become the corporate standard for efficient automation. However, as containers grow in popularity...

UFO³ 安全漏洞

UFO³ is an open-source cross-device collaboration multi-agent task orchestration tool developed by Microsoft. Version UFO³ 3.0.1-4-ge2626659 contains a security vulnerability. This vulnerability stems from variable instance fields being overwritten in the shared WebSocket processor instances, whi...