6593 matches found
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: A null check was added for toppipetoprogram in the commitplanesforstream function. This fix addresses a null pointer dereferencing issue in the commitplanesforstream function at line 4140. The issue could occur...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Do not crash in stacktop for tasks without vDSO Not all tasks have a vDSO mapped; for example, kthreads never have one. If such a task ever calls stacktop, it will dereference the NULL vdso pointer and crash. This can...
Owasp-top-10-k8s-2025
OWASP Kubernetes Top 10 2025, praktisch Ein Capture-the-Flag , aufbauend auf dem OWASP Kubernetes Top 10 — 2025. Du wurdest angeheuert, um NimbusMart zu red-teamen, ein fiktives E-Commerce-Unternehmen, dessen Cluster schneller wuchs als seine Sicherheit. Zehn Herausforderungen, eine pro...
zi
🎯 Roadmap Generally, new features will be introduced as a component to improve performance and compatibility and not to force, but to allow the user decide and choose the features. Let us know what should be improved and maintained with a ⭐ on features you like and use: ⚙️ Plugins 🌀 Annexes 📦...
SecureAI-Scan v0.10.0
SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...
CVE-2026-67189
pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...
EUVD-2026-62699
pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...
CVE-2026-67189
pfSense Plus before 26.07 and CE through 2.8.1 render PTR records as unsanitized HTML in Traffic Graphs AJAX responses. An attacker controlling a PTR record who appears as a top talker can execute arbitrary JavaScript in an admin's browser, enabling session hijacking and OS command execution. Fix...
The OWASP LLM Top 10 Was the Warm-Up: What Comes Next
This is Post 3 of a three-part series. Start withPost 1: Agentic AI Security: The Chatbot Era Is Over, then continue to Post 2: Generative AI Security: Why AI Needs a New Kind of Security. When the OWASP Top 10 for LLM Applications arrived, it did the industry a real service. It gave security tea...
exp-labs
exp-labs Cybersecurity Training Platform This modern web secu...
GO-2025-3600 vulnerabilities
Vulnerabilities for packages: nats-top-fips, nats-top, prometheus-nats-exporter, nats-server, nats-server-fips...
GO-2026-4533 vulnerabilities
Vulnerabilities for packages: nats-top-fips, nats-top, rke2-runtime, telegraf, k3s, kine...
GO-2026-4832 vulnerabilities
Vulnerabilities for packages: nats-top-fips, nats, rke2-runtime-fips, nats-top, prometheus-nats-exporter, nats-fips, prometheus-nats-exporter-fips, rke2-runtime, telegraf, k3s, kine, milvus...
GO-2025-3600 vulnerabilities
Vulnerabilities for packages: nats-server, nats-top...
GO-2026-4826 vulnerabilities
Vulnerabilities for packages: telegraf, kine, nats-top, nats, k3s...
GO-2026-4830 vulnerabilities
Vulnerabilities for packages: telegraf, kine, nats-top, nats, k3s...
GO-2026-4533 vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, k3s, kine...
GO-2026-4835 vulnerabilities
Vulnerabilities for packages: telegraf, kine, nats-top, nats, k3s...