894 matches found
CVE-2026-31684
In the Linux kernel, the following vulnerability has been resolved: net: sched: actcsum: validate nested VLAN headers tcfcsumact walks nested VLAN headers directly from skb-data when an skb still carries in-payload VLAN tags. The current code reads vlan-hvlanencapsulatedproto and then pulls...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the nested VLAN headers in actcsum not being linearly present. This vulnerability may lead to the...
The Governance Gap: How the EU AI Act Makes API Security a Compliance Imperative
Your legal team just handed you a 400-page document and said "figure out compliance." The EU AI Act is live, your organization falls under its scope, which is broader than many expect. Even non‑EU companies must comply if their AI systems are used, deployed, or produce effects within the European...
EUVD-2026-25322
OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows attackers to bypass fd-based defenses. Attackers can exploit check-then-act patterns in applypatch, remove, and mkdir operations to manipulate files between validation and execution...
CVE-2026-41338
OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows attackers to bypass fd-based defenses. Attackers can exploit check-then-act patterns in applypatch, remove, and mkdir operations to manipulate files between validation and execution...
PT-2026-34769
OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows attackers to bypass fd-based defenses. Attackers can exploit check-then-act patterns in apply patch, remove, and mkdir operations to manipulate files between validation and executio...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013471)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013471 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: use the backlog for mirred ingress The test Davide added in commit...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011358)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011358 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: use the backlog for mirred ingress The test Davide added in commit...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012969)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012969 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: don't override retval if we already lost the skb If we're redirecting the...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011355)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011355 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: don't override retval if we already lost the skb If we're redirecting the...
CERTFR-2026-ACT-018
creationtimestamp| type| source ---|---|--- 2026-04-20 12:26:09+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mjwhnnjfjr2y 2026-04-20 13:39:09+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mjwlq7lk6a2i...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007242)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007242 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: use the backlog for mirred ingress The test Davide added in commit...
PowMix botnet targets Czech workforce
Cisco Talos discovered an ongoing malicious campaign, operating since at least December 2025, affecting a broader workforce in the Czech Republic with a previously undocumented botnet we call "PowMix." PowMix employs randomized command-and-control C2 beaconing intervals, rather than persistent...
CVE-2025-50671
CVE-2025-50671 describes a buffer overflow in D-Link DI-8003 firmware (16.07.26A1) caused by improper bounds checking in the /xwgl_ref.asp endpoint. An attacker can trigger by sending crafted HTTP GET requests with excessively long values for parameters such as name, en, user_id, shibie_name, tim...
CERTFR-2026-ACT-015
creationtimestamp| type| source ---|---|--- 2026-04-07 14:41:37+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mivz5ulz6q2n 2026-04-12 02:57:19+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mjbe4yzibh2t...
GHSA-RM5C-4RMF-VVHW OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses
Summary Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses Current Maintainer Triage - Status: narrow - Normalized severity: medium - Assessment: Released workspace-only applypatch remove and mkdir operations were still check-then-act, but the draft overstates scope by...
OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses
Summary Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses Current Maintainer Triage - Status: narrow - Normalized severity: medium - Assessment: Released workspace-only applypatch remove and mkdir operations were still check-then-act, but the draft overstates scope by...
GO-2026-4891 act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act
act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act...