23305 matches found
xmloxide
xmloxide Una reimplementazione in Rust puro di libxml2 — la libreria di parsing XML/HTML de facto standard nel mondo open-source. libxml2 è diventata ufficialmente non mantenuta a dicembre 2025 con problemi di sicurezza noti. xmloxide punta ad essere un sostituto memory-safe e ad alte prestazioni...
redeval
RedEval - Framework di Valutazione della Sicurezza per LLM Un framework completo per valutare la sicurezza dei Large Language Model LLM attraverso test sistematici di attacco e rifiuto. RedEval fornisce una piattaforma unificata, sicura ed estensibile per valutare la robustezza degli LLM contro...
MiracleLinux 9 : thunderbird-140.13.0-1.el9_8.ML.1 (AXSA:2026-1625:19)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1625:19 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...
ROOT-OS-DEBIAN-11-CVE-2026-73072 CVE-2026-73072 in vim - Patched by Root
Root has patched CVE-2026-73072 in the vim package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-74667 net/packet: reset the MAC header on the packet-socket transmit path
In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packetparseheaders resets the MAC header only for a SOCKRAW frame whose socket did not bind a protocol. A protocol-bound SOCKRAW socket, any SOCKDGRAM frame, and...
CVE-2026-39113
CVE-2026-39113: Overflow del buffer heap nell'estensione SQLAR opzionale di SQLite Riepilogo esecutivo CVE-2026-39113 è un overflow del buffer heap nell'estensione SQLAR opzionale di SQLite. In un'applicazione che ha caricato l'estensione, un attaccante in grado di invocare sqlaruncompress con un...
gemini-2.5-pro-nf-tables-red-teamin
gemini-2.5-pro-nf-tables-red-teamin Eine technische Fallstudie und ein Timeline-Datensatz, die Googles Gemini 2.5 Pro Safety-Alignment-Richtlinien, Guardrails und die Entwicklung des Verweigerungsverhaltens in Bezug auf Legacy-Schwachstellen-Primitiven des Linux-Kernels CVE-2023-32233...
Chromium: CVE-2026-76043 Incorrect calculation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
sinter
Sinter Sinter is a 100% user-mode endpoint security agent for macOS 10.15 and above, written in Swift. Sinter uses the user-mode EndpointSecurity API to subscribe to and receive authorization callbacks from the macOS kernel, for a set of security-relevant event types. The current version of Sinte...
CVE-2026-61711 vulnerabilities
Vulnerabilities for packages: podman, kubescape, guac, conftest, scorecard, kaniko...
MINI-476C-8RP5-9R79
Bulletin has no description...
ROOT-OS-DEBIAN-11-CVE-2026-34502 CVE-2026-34502 in apr-util - Patched by Root
Root has patched CVE-2026-34502 in the apr-util package for Root:Debian:11. Multiple fixed versions available...
OESA-2026-3455 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: xfs: remove xfsattrleafhasname The calling convention of xfsattrleafhasname is problematic, because it returns a NULL buffer when xfsattr3leafread fails, a valid...
GO-2026-6196 vulnerabilities
Vulnerabilities for packages: telegraf...
UBUNTU-CVE-2026-62377
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heifcontextreadfrommemory can leave the context with no registered sequence tracks and crash when heifcontextgettrackctx, 0 is called. HeifContext::gettrack in libheif/context.cc...
block_buffer: panic corrupts inline buffer position
Summary A caught panic may leave the cursor position of EagerBuffer or ReadBuffer in a corrupted state; this in turn allows out-of-bounds reads/writes. Details & PoC The following two tests fail miri: rust cfgmiri test fn eagerdigestblockspaniccorruptsinlineposition // EagerBuffer stores its curs...
OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior
OpenAI on Tuesday revealed that it paused reinforcement learning RL training for its latest artificial intelligence AI models for two weeks while it shored up additional defenses and increased the scope of its monitoring to avert another Hugging Face-like incident. "As models become more capable,...
CVE-2026-75142
FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer libavformat/mpegenc.c. When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow...