Node.js DNS resolveAny Process Abort

Node.js versions 22.x, 24.x, and 26.x contain a flaw where dns.resolveAny can abort the process when a DNS response has more than 256 A records. The supplied offline checker compares reported version evidence against fixed releases...

Garlic in a Box: I2P Network Emulator

The Invisible Internet Project I2P is a peer-to-peer anonymity network whose routing and peer-selection mechanics underlie a growing family of state-sponsored covert relay architectures. Studying these mechanics demands a controlled, reproducible environment. We present Garlic-in-a-Box, an...

Node.js DNS resolveAny Process Abort

Node.js versions 22.x, 24.x, and 26.x contain a flaw where dns.resolveAny can abort a process when DNS responses contain more than 256 A records. This submission provides source-backed research and an implementation plan; it contains no checker or proof of concept...

Can Agentic Code Review Catch Vulnerabilities Before They Are Merged?

LLM agents have been increasingly adopted for security-focused code review, but existing benchmarks mostly derive the reviewed changes from their later fixes instead of the real-world bug-introducing commits. In this paper, we present SecPRBench, the first comprehensive benchmark for evaluating...

CVE-2026-98991

In the Linux kernel, the following vulnerability has been resolved: namespace: queue a mount only once for mount notifications mntnotifyadd puts a mount on notifylist. It doesn't check whether the mount is on the list already. That's fine as long as every mount is queued at most once per...

EUVD-2026-108785

In the Linux kernel, the following vulnerability has been resolved: namespace: queue a mount only once for mount notifications mntnotifyadd puts a mount on notifylist. It doesn't check whether the mount is on the list already. That's fine as long as every mount is queued at most once per...

CVE-2026-98981

In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detaching the mounts on it unlink, rmdir and rename remove the entry from the filesystem, call detachmounts on the entry with the inode locked and then call ddelete once the inode is unlocked. Th...

EUVD-2026-108540

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network...

PT-2026-122200

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch...

Security Updates for Microsoft Dynamics NAV 2017 (Oct 2026)

The Microsoft Dynamics NAV 2017 install is missing a security update. It is, therefore, affected by a vulnerability: - Deserialization of untrusted data allows an authorized attacker to execute code over a network. CVE-2026-100214 Note that Nessus has not attempted to exploit this issue but has...

CVE-2026-96185

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network...

CVE-2026-96185

A stack-based buffer overflow exists in Microsoft Exchange Online , which could allow an authorized attacker to achieve remote code execution over a network. The vulnerability is classified as HIGH severity with a CVSS score of 7.5. No specific exploit information or remediation details are provi...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.7) +1696 more potentially affected by unknown CVE via pyjwt (>=2.0.0a2, <=2.13.0)

pyjwt PYPI version =2.0.0a2, =0.5.3, =2.3.0, =0.1.0, =1.0.0, =1.8.26, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =1.2.0, =1.2.1 - adminui 1.5.2 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-PYJWT-21431293...

CLEANSTART-2026-YN04492 On Unix systems, opening a file in an os

CVE-2026-39822 affects multiple packages. On Unix systems, opening a file in an os. See references for individual vulnerability details...

EUVD-2026-107640

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

PT-2026-121679

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Online affected versions not specified Microsoft Exchange Server affected versions not specified Description A stack-based buffer overflow allows an authorized attacker to execute code over a network. A stack-based buffer...

CVE-2026-76300 Security Hardening in Splunk Enterprise - October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

CVE-2026-76300

The vulnerability CVE-2026-76300 affects Splunk Enterprise as part of a software hardening release by Cisco . It is caused by improper control of a resource through its lifetime (CWE-664) following an internal security review. While the technical root cause is grouped under this CWE, specific com...

EUVD-2026-107407

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target mus...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2026-113792 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...