CVE-2026-32287 Infinite loop in github.com/antchfx/xpath

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true"...

CVE-2026-32287 Infinite loop in github.com/antchfx/xpath

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true"...

CVE-2026-32287 Infinite loop in github.com/antchfx/xpath

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true"...

CVE-2026-32287

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true"...

Exploit for Argument Injection in Phpmailer_Project Phpmailer

MediCare Portal Intentionally vulnerable healthcare patient...

GHSA-52JH-2XXH-PWH6 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, k3s, telegraf, nats-top-fips, prometheus-nats-exporter-fips, milvus, nats-top, nats-fips, nats, rke2-runtime-fips, rke2-runtime, kine...

CVE-2026-29785 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, k3s, telegraf, nats-top-fips, prometheus-nats-exporter-fips, milvus, nats-top, nats-fips, nats, rke2-runtime-fips, rke2-runtime, kine...

BUGSCANNER---PHP-Web-Security-Scanner-for-Bug-Bounty-Penetration-Testing

!Pythonhttps://img.shields.io/badge/Python-3.10%2B-3776AB?st...

The Top 10 Threats Related to Agent Skills

Read about the top 10 critical threats related to Agent Skills that security teams should consider while building and evaluating agents...

GO-2026-4526 Infinite loop in github.com/antchfx/xpath

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true"...

PT-2026-28438

Name of the Vulnerable Software and Affected Versions versions prior to 2026-32287 Description Boolean XPath expressions that evaluate to true can cause an infinite loop within the logicalQuery.Select function, resulting in 100% CPU utilization. This condition can be initiated by top-level...

Top Password RAR Password Recovery 缓冲区错误漏洞

Top Password RAR Password Recovery is a compression file password recovery tool developed by Top Password Corporation. Version 1.80 of Top Password RAR Password Recovery contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the registration dialog box, which...

Web-Application-Vulnerability-Scanner

WebVulnScan A beginner-to-intermediate web application vuln...

Hackers Abuse .arpa Top-Level Domain to Host Phishing Scams

Hackers abuse the .arpa Top-Level Domain to host phishing scams, using IPv6 tunnels, reverse DNS tricks, and shadow domains to bypass security checks...

CVE-2026-22866

Ethereum Name Service ENS is a distributed, open, and extensible naming system based on the Ethereum blockchain. In versions 1.6.2 and prior, the RSASHA256Algorithm and RSASHA1Algorithm contracts fail to validate PKCS1 v1.5 padding structure when verifying RSA signatures. The contracts only check...

GHSA-QRVQ-68C2-7GRW vulnerabilities

Vulnerabilities for packages: kine, nats-top, telegraf, k3s...

CVE-2026-27571 vulnerabilities

Vulnerabilities for packages: kine, nats-top, telegraf, k3s...

GHSA-QRVQ-68C2-7GRW vulnerabilities

Vulnerabilities for packages: k3s, nats-top-fips, nats-top, telegraf, rke2-runtime, kine...

CVE-2026-27571 vulnerabilities

Vulnerabilities for packages: k3s, nats-top-fips, nats-top, telegraf, rke2-runtime, kine...

GHSA-MHC9-48GJ-9GP3 Fickling has safety check bypass via REDUCE+BUILD opcode sequence

Assessment It is believed that the analysis pass works as intended, REDUCE and BUILD are not at fault here. The few potentially unsafe modules have been added to the blocklist https://github.com/trailofbits/fickling/commit/0c4558d950daf70e134090573450ddcedaf10400. Original report Summary All 5 of...