CVE-2026-116096 ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write

A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...

CVE-2026-116096

A heap out-of-bounds write vulnerability exists in the Pocket-TTS component of ggml-org llama.cpp . The flaw is located in the list_pockettts_state_slots function within the file tools/mtmd/models/pockettts-gen.cpp, caused by the manipulation of the mmproj argument. This issue requires local acce...

Exploit for CVE-2026-116106

CVE-2026-116106 — HeyCyan App 1.0.103: controle de acesso inco...

Exploit for Race Condition in Sonicwall Sma_6200_Firmware

CVE-2024-6387-how-to-fix Vulnerability remediation and mitiga...

Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls...

CVE-2026-116144

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow. Attackers can supply a crafted MVG file that, when read with specific arguments, exhausts the stack and crashes the process, causing a denial of service...

gcat

Gcat A stealthy Python based backdoor that uses Gmail as a command and control server This project was inspired by the original PoC code from Benjamin Donnelly This is PoC code... ... that was released for orginazations to test their defenses against these type of attacks. In order to detect them...

OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning RL training and internal inference of its most advanced AI models. "Based on the current state of alignment research, monitoring systems, and the security of internet...

CVE-2026-114742

The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allowing users with contributor-level access and above to modify, reconfigure and publish tours created by other users...

CVE-2026-114742 WP VR 8.3.0 - 9.0.2 - Contributor+ Arbitrary Tour Update via IDOR

The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allowing users with contributor-level access and above to modify, reconfigure and publish tours created by other users...

CVE-2026-114741 WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDOR

The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours, allowing users with contributor-level access and above to read and modify tours created by other users...

CVE-2026-114741 WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDOR

The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours, allowing users with contributor-level access and above to read and modify tours created by other users...

CVE-2026-114742 WP VR 8.3.0 - 9.0.2 - Contributor+ Arbitrary Tour Update via IDOR

The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allowing users with contributor-level access and above to modify, reconfigure and publish tours created by other users...

CVE-2026-114741

The WPVR WordPress plugin versions 9.0.0 through 9.0.2 is vulnerable to an Insecure Direct Object Reference (IDOR) issue. The plugin fails to perform adequate object-level authorization checks when handling requests to read or update virtual tours. This allows users with contributor-level access ...

CVE-2026-114742

The WPVR WordPress plugin, in versions 8.3.0 through 9.0.2 , is vulnerable to an Insecure Direct Object Reference (IDOR) . The root cause is a failure to perform object-level ownership checks when updating virtual tours. This allows users with contributor-level access or higher to modify, reconfi...

Amazon Linux 2023 : java-21-amazon-corretto, java-21-amazon-corretto-devel, java-21-amazon-corretto-headless (ALAS2023-2026-3319)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3319 advisory. Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updat...

PT-2026-122946

The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours, allowing users with contributor-level access and above to read and modify tours created by other users...

Repairing Broken Access Control in Web Applications with LLMs: An Empirical Benchmark Study

Broken access control BAC ranks among the most severe web-application vulnerability classes, yet its automated repair remains largely unexplored. Unlike memory-safety vulnerabilities, BAC is a logic vulnerability whose repair demands a deep understanding of an application's access-control model a...

SPIP 4.4.16 SQL Injection / SSRF

SPIP version 4.4.16 and earlier contain an unauthenticated blind SQL injection in the sitemap endpoint and an authenticated SSRF issue caused by unvalidated HTTP redirect targets. Proof of concept material is included for both vulnerabilities. https://packetstorm.news/download/237466...

Ash Framework authorization issue vulnerability

Versions 2.6.22 through 2.15.2 of the Ash Framework contain an authorization issue vulnerability. This vulnerability stems from improper authorization; when upserts are skipped, multi-tenant attributes are not applied to resources, potentially allowing read access to records belonging to other...