TensorFlow vulnerable to `CHECK` fail in `Unbatch`

ImpactWhen Unbatch receives a nonscalar input id, it gives a CHECK fail that can trigger a denial of service attack.pythonimport tensorflow as tfimport numpy as nparg0=tf.constantvalue=np.random.randomsize=3, 3, 1, dtype=tf.float64arg1=tf.constantvalue=np.random.randint0,100,size=3, 3, 1,...

TensorFlow vulnerable to segfault in `Requantize`

ImpactIf Requantize is given inputmin, inputmax, requestedoutputmin, requestedoutputmax tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack.pythonimport tensorflow as tfouttype = tf.quint8input = tf.constant1, shape=3, dtype=tf.qint32inputmin...

TensorFlow vulnerable to null dereference on MLIR on empty function attributes

ImpactWhen mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it gives a null dereference.cpp// Import the function attributes with a tf. prefix to match the current// infrastructure expectations.for const auto& namedAttr : func.attr const std::string& name = "tf."...

TensorFlow vulnerable to `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs`

ImpactWhen tensorflow::fulltype::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status.cppStatus SubstituteForEachAttrMap& attrs, FullTypeDef& t DCHECKEQt.argssize, 3; const auto& cont = t.args0; const auto& tmpl =...

PYSEC-2026-3184 TensorFlow vulnerable to `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs`

Impact When tensorflow::fulltype::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status. cpp Status SubstituteForEachAttrMap& attrs, FullTypeDef& t DCHECKEQt.argssize, 3; const auto& cont = t.args0; const auto& tmpl =...

TensorFlow vulnerable to `CHECK` failure in `AvgPoolOp`

ImpactThe AvgPoolOp function takes an argument ksize that must be positive but is not checked. A negative ksize can trigger a CHECK failure and crash the program.pythonimport tensorflow as tfimport numpy as npvalue = np.ones1, 1, 1, 1ksize = 1, 1e20, 1, 1strides = 1, 1, 1, 1padding =...

PYSEC-2026-3128 TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions

Impact When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. python import tensorflow as tf class QuantConv2DTransposedtf.keras.layers.Layer: def buildself, inputshape: self.kernel = self.addweight"kernel", 3, 3,...

CVE-2024-5846

creationtimestamp| type| source ---|---|--- 2026-07-13 14:00:06+00:00| seen| https://t.me/truesecator/8341 2026-07-14 00:00:44+00:00| seen| https://t.me/truesecator/8341...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

CERTFR-2026-ACT-030

creationtimestamp| type| source ---|---|--- 2026-07-13 13:36:35+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mqjsqx45tu2v 2026-07-13 13:36:38+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116912933713310926 2026-07-13 14:00:27+00:00| seen|...

CVE-2026-6541

creationtimestamp| type| source ---|---|--- 2026-07-13 13:19:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjrrssiwv27 2026-07-13 13:34:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjsnlua352g 2026-07-13 18:19:01+00:00| seen|...

perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution.

A flaw was found in perl-DBI. A heap overflow vulnerability exists when preparsing SQL statements with more than 9 binders. The preparse method incorrectly allocates buffer space for SQL placeholder characters, leading to an overflow when processing binders with two or more digits. This can resul...

EUVD-2026-43467

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 2.0.8...

EUVD-2026-43445

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hitesh Chandwani reCAPTCHA v2 & v3 for Asgaros Forum recaptcha-for-asgaros-forum allows DOM-Based XSS.This issue affects reCAPTCHA v2 & v3 for Asgaros Forum: from n/a through = 1.1.0...

CVE-2026-57411

creationtimestamp| type| source ---|---|--- 2026-07-13 12:10:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqjnw7ua252u 2026-07-13 12:10:21+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116912594644386383...

nginx:1.24 security, bug fix, and enhancement update

An update is available for nginx, module.nginx. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

CVE-2026-59523

creationtimestamp| type| source ---|---|--- 2026-07-13 11:57:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjn72rpzm2d 2026-07-13 12:45:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjpwgtxo52e 2026-07-14 01:51:23+00:00| seen|...

CVE-2026-61985

creationtimestamp| type| source ---|---|--- 2026-07-13 11:54:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjmzksnuu2a 2026-07-13 12:46:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjpxttvs52e 2026-07-13 14:12:44+00:00| seen|...

Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots

A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security team was thinking about AI agents in the SOC. Smart team. Serious program. They had already connected Claude to a few detection tools and were seeing real value in specific investigations. But as...

CVE-2026-57391

creationtimestamp| type| source ---|---|--- 2026-07-13 11:07:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjkgobrfr2w 2026-07-16 07:56:30+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr5m3eps2b...