CVE-2026-14678

Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

CVE-2026-14678 PostgreSQL pg_trgm picksplit reads past end of buffer

Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

[SECURITY] [DSA 6433-1] xdg-dbus-proxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6433-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 12, 2026 https://www.debian.org/security/faq -...

Debian dsa-6433 : xdg-dbus-proxy - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6433 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6433-1 [email protected] https://www.debian.org/security/ Moritz...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the usbgadgetstatework function in the /drivers/usb/gadget/udc/core.c file of the Linux kernel is related to situations where the signal processing routine is involved in a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2026-55360

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

Linux kernel posix-cpu-timers Heap Buffer Overflow Privilege Escalation

The vulnerability of the systimerdelete function in the kernel/time/posix-cpu-timers.c file of Linux operating systems is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability can allow an attacker to enhance their privileges and disclose...

On a General Theoretical Framework for Radio Frequency Fingerprint-Based Authentication

While radio frequency fingerprint RFF-based wireless device authentication has been widely studied across different datasets and scenarios, there still lacks a fundamental theory to explain why and how RFF can serve as a reliable device identity, significantly hindering the practical application ...

Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware

C...

MAL-2026-13474 Malicious code in @diezyyasha/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd6b728a9ecc8547f7199d74cfc1070334a586f5fd7fed6e87e332b70945c733 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DHS Wants Protesters’ Signal Group Chats

A lawsuit accuses Homeland Security of violating protesters’ free-speech rights—but the agency is using it to try to get access to the plaintiffs’ encrypted communications...

ROS-20260804-73-0028

The vulnerability of the signalourwithdraw function in the fs/gfs2 Util.c file of the GFS2 file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

CVE-2026-67976

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

How Benchmarks and Evaluation Protocols Shape Conclusions in Provenance-Based Intrusion Detection

Provenance-based intrusion detection systems PIDS frequently report strong performance, but the conclusions drawn from these results can be highly sensitive to benchmarking choices and evaluation protocols. We investigate this dependency by re-evaluating representative PIDS on public datasets tha...

Security in Low-Altitude ISAC with Coupled Communication and Sensing Information Leakage

Secure information transmission in integrated sensing and communication ISAC systems deployed in low-altitude wireless networks LAWN is particularly challenging due to the open airspace and the broadcast nature of wireless signals reused for both communication and sensing, which give rise to more...

CVE-2026-6889

This CVE ID is rejected/not used and does not represent an active vulnerability entry.

NewStart CGSL MAIN 6.06 : glib2 Multiple Vulnerabilities (NS-SA-2026-0061)

The remote NewStart CGSL host, running version MAIN 6.06, has glib2 packages installed that are affected by multiple vulnerabilities: - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead,...

Siemens SIMATIC S7-1500 CPU 1518 MFP Signal Handler Race Condition (CVE-2026-23340)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505603; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Signal Handler Race Condition (CVE-2026-23273)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505605; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Signal Handler Race Condition (CVE-2025-71075)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505740; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...