hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage $ ./hashcobra -H --== hashcobra by sepehrdad ==-- usage:...

CVE-2026-52733: Incomplete Cleanup

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a natural or attacker-influenced chain fork can leave stale Sapling and Orchard note-commitment subtree roots in Zebra state. In zebra-state/src/service/nonfinalizedstate/chain.rs, Chain::poptip removed a reverted tip block but did n...

GO-2026-5031 vulnerabilities

Vulnerabilities for packages: seaweedfs, seaweedfs-operator-fips, gitlab-workhorse-ce, mattermost-fips, seaweedfs-rocksdb, seaweedfs-fips, seaweedfs-rocksdb-fips, seaweedfs-operator...

GHSA-Q675-QJ96-32M9 vulnerabilities

Vulnerabilities for packages: seaweedfs, seaweedfs-operator-fips, gitlab-workhorse-ce, mattermost-fips, seaweedfs-rocksdb, seaweedfs-fips, seaweedfs-rocksdb-fips, seaweedfs-operator...

zebrad has persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip

Am I affected You are affected if: 1. You run zebrad up to and including v4.4.1. 2. Your node participates in a network where chain forks occur mainnet, testnet, or any network with multiple miners. All default configurations are affected. The corruption persists across restarts because it is...

GHSA-2GF8-Q9RR-JQ3H zebrad has persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip

Am I affected You are affected if: 1. You run zebrad up to and including v4.4.1. 2. Your node participates in a network where chain forks occur mainnet, testnet, or any network with multiple miners. All default configurations are affected. The corruption persists across restarts because it is...

PT-2026-55469

Name of the Vulnerable Software and Affected Versions ZEBRA versions prior to 4.5.0 Description A chain fork, whether natural or attacker-influenced, can cause stale Sapling and Orchard note-commitment subtree roots to remain in the Zebra state. In the zebra-state/src/service/non finalized...

PT-2026-55343

Am I affected You are affected if: 1. You run zebrad up to and including v4.4.1. 2. Your node participates in a network where chain forks occur mainnet, testnet, or any network with multiple miners. All default configurations are affected. The corruption persists across restarts because it is...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: knative-serving-fips, rancher, gitlab-workhorse-ce, reports-server, gitea-fips, chisel, flux-source-controller, flux-image-automation-controller-fips, knative-kafka-broker-fips, prometheus-mongodb-exporter, elastic-agent-fips, argo-cd, zarf, kube-state-metrics,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-aws-sns-fips, crossplane-provider-aws-cloudwatch, pulumi-language-java, teleport, gptscript, terraform-provider-azapi-fips, gitea-fips, flux-source-controller, knative-kafka-broker-fips, chezmoi,...

com.wavemaker.runtime:wavemaker-app-runtime-core (>=11.3.0, <=11.8.5.ee), io.github.grails-spring-security-saml:spring-security-saml (>=6.0.9, <=6.0.10) +4 more potentially affected by CVE-2026-41694 via org.springframework.security:spring-security-saml2-service-provider (>=5.8.0, <=5.8.16)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =5.8.0, =11.3.0, =6.0.9, =1.19.1, =1.19.1, =5.26.4, =5.26.4, =5.27.15 Source cves: CVE-2026-41694 Source advisory: GHSA-WW38-37G9-M3Q3...

com.wavemaker.runtime:wavemaker-app-runtime-core (>=11.3.0, <=11.8.5.ee), io.github.grails-spring-security-saml:spring-security-saml (>=6.0.9, <=6.0.10) +4 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=5.8.0, <=5.8.16)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =5.8.0, =11.3.0, =6.0.9, =1.19.1, =1.19.1, =5.26.4, =5.26.4, =5.27.15 Source cves: CVE-2026-40988 Source advisory: OSV:GHSA-M69X-PW9P-7J3Q...

com.wavemaker.runtime:wavemaker-app-runtime-core (>=11.3.0, <=11.8.5.ee), io.github.grails-spring-security-saml:spring-security-saml (>=6.0.9, <=6.0.10) +4 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=5.8.0, <=5.8.16)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =5.8.0, =11.3.0, =6.0.9, =1.19.1, =1.19.1, =5.26.4, =5.26.4, =5.27.15 Source cves: CVE-2026-40988 Source advisory: GHSA-M69X-PW9P-7J3Q...

com.wavemaker.runtime:wavemaker-app-runtime-core (>=11.0.0.beta.ee-20220401222842, <=11.2.6.ee), io.spinnaker.gate:gate-api-tck (>=6.63.0, <=6.69.0) +8 more potentially affected by CVE-2026-41003 via org.springframework.security:spring-security-saml2-service-provider (>=5.6.2, <=5.7.11)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =5.6.2, =11.0.0.beta.ee-20220401222842, =6.63.0, =6.63.0, =6.63.0, =1.17.0, =1.17.0, =5.26.0, =5.26.0, =0.6.4-b, =0.7.0 - zone.cogni.lib.security:security 1.2.5 Source cves: CVE-2026-41003 Source advisory:...

com.wavemaker.runtime:wavemaker-app-runtime-core (>=11.3.0, <=11.8.5.ee), io.github.grails-spring-security-saml:spring-security-saml (>=6.0.9, <=6.0.10) +4 more potentially affected by CVE-2026-41003 via org.springframework.security:spring-security-saml2-service-provider (>=5.8.0, <=5.8.16)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =5.8.0, =11.3.0, =6.0.9, =1.19.1, =1.19.1, =5.26.4, =5.26.4, =5.27.15 Source cves: CVE-2026-41003 Source advisory: GHSA-3PJJ-QPW6-5FCM...

com.wavemaker.runtime:wavemaker-app-runtime-core (>=11.3.0, <=11.8.5.ee), io.github.grails-spring-security-saml:spring-security-saml (>=6.0.9, <=6.0.10) +4 more potentially affected by CVE-2026-41003 via org.springframework.security:spring-security-saml2-service-provider (>=5.8.0, <=5.8.16)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =5.8.0, =11.3.0, =6.0.9, =1.19.1, =1.19.1, =5.26.4, =5.26.4, =5.27.15 Source cves: CVE-2026-41003 Source advisory: OSV:GHSA-3PJJ-QPW6-5FCM...

com.wavemaker.runtime:wavemaker-app-runtime-core (>=11.1.0, <=11.2.6.ee), io.spinnaker.gate:gate-api-tck (>=6.63.0, <=6.69.0) +7 more potentially affected by CVE-2026-41003 via org.springframework.security:spring-security-saml2-service-provider (>=5.7.2, <=5.7.11)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =5.7.2, =11.1.0, =6.63.0, =6.63.0, =6.63.0, =1.17.0, =1.17.0, =5.26.1, =5.26.1, =5.26.3 - zone.cogni.asquare:security2 0.7.0 Source cves: CVE-2026-41003 Source advisory: MEND:CVE-2026-41003...

CVE-2024-26958

In the Linux kernel, the following vulnerability has been resolved: nfs: fix UAF in direct writes In production we have been hitting the following warning consistently ------------ cut here ------------ refcountt: underflow; use-after-free. WARNING: CPU: 17 PID: 1800359 at lib/refcount.c:28...

CVE-2024-26958 nfs: fix UAF in direct writes

In the Linux kernel, the following vulnerability has been resolved: nfs: fix UAF in direct writes In production we have been hitting the following warning consistently ------------ cut here ------------ refcountt: underflow; use-after-free. WARNING: CPU: 17 PID: 1800359 at lib/refcount.c:28...

rocksdb:db_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6607292325756928 Project: rocksdb Fuzzing Engine: libFuzzer Fuzz Target: dbfuzzer Job Type: libfuzzerasanrocksdb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7d4d6c9f605a Crash State: NULL Sanitizer: address ASAN Recommended...