CVE-2026-14807

creationtimestamp| type| source ---|---|--- 2026-07-06 08:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpxmsdqm5f2s 2026-07-06 08:14:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxnj6vp2d2n 2026-07-06 09:00:30+00:00| seen|...

GHSA-QJ7J-3JP8-8CCV

creationtimestamp| type| source ---|---|--- 2026-07-06 07:58:49+00:00| seen| https://gist.github.com/alon710/55a58ea60e7552b2b158fa946acca5cd 2026-07-06 07:59:30+00:00| seen| https://gist.github.com/alon710/2046460989ab8e559515c0789ce99248...

CVE-2026-56350

creationtimestamp| type| source ---|---|--- 2026-07-06 07:58:49+00:00| seen| https://gist.github.com/alon710/d7446e83b138301fa78ba45ab4a16d68 2026-07-06 07:59:30+00:00| seen| https://gist.github.com/alon710/8dfa8b639d7c92db923d54e0e8243293...

GHSA-3FMP-59V6-4QW2

creationtimestamp| type| source ---|---|--- 2026-07-06 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116870089136632895 2026-07-06 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpwrvj6vez2g...

Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via...

CVE-2026-9085

creationtimestamp| type| source ---|---|--- 2026-07-05 16:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpvx3mflvp25 2026-07-05 16:24:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvygnreh42i...

CVE-2026-6509

creationtimestamp| type| source ---|---|--- 2026-07-05 16:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpvx3fljf32e 2026-07-05 16:00:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvx3ktpwy2c 2026-07-05 19:42:17+00:00| seen|...

CVE-2026-12250

creationtimestamp| type| source ---|---|--- 2026-07-05 15:55:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvwrh5yoe2k 2026-07-05 16:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpvx3tbhuw24 2026-07-05 19:44:11+00:00| seen|...

CVE-2026-57324

creationtimestamp| type| source ---|---|--- 2026-07-05 05:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mput2nr3sk2w 2026-07-05 05:23:11+00:00| seen| https://bsky.app/profile/potato.software/post/3mputhahvrt26...

CVE-2026-14703

creationtimestamp| type| source ---|---|--- 2026-07-05 05:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116865605611564132 2026-07-05 05:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpus6ntnj72a 2026-07-05 10:04:14+00:00| seen|...

CVE-2026-14691

creationtimestamp| type| source ---|---|--- 2026-07-05 02:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116864897921651205 2026-07-05 02:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpui4szdd22o 2026-07-05 09:58:11+00:00| seen|...

CVE-2025-71373

creationtimestamp| type| source ---|---|--- 2026-07-04 05:28:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpsdc2tpwf2x 2026-07-04 06:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpsf3ot6nx2f...

CVE-2025-71372

creationtimestamp| type| source ---|---|--- 2026-07-04 05:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpsbwlkaf723 2026-07-04 06:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpsf3ib2b22u...

CVE-2025-71362

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources...

CVE-2025-71362 picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources...

CVE-2025-71362 picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources...

EUVD-2025-210418

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources...

Securing Deep Learning Hardware: A Survey of Side-Channel Vulnerabilities and Countermeasures

As deep learning models are increasingly deployed in critical sectors such as healthcare, finance, and security, ensuring their protection against emerging threats has become crucial. Among these threats, side-channel attacks SCAs represent a particular challenge since they can extract sensitive...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...