[SECURITY] Fedora 43 Update: i2c-display-0.5.4-1.fc43

A Go application for Single Board Computers Raspberry Pi 3/4, Rock 3C that controls I2C OLED displays SSD1306, SH1106, etc. showing system stats and network information with rotating pages. Features: - System monitoring disk, RAM, CPU temperature - Network interface information - Automatic page...

CVE-2026-74952

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Application Update component...

SUSE CVE-2026-74952

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2...

wlctl v0.1.10

wlctl WiFi TUI for NetworkManager. Why impala is a great wifi TUI but it talks to iwd. If your distro already runs NetworkManager most do — GNOME, KDE, Ubuntu, Fedora, Pop, …, you can't drop impala in without ripping the stack out. wlctl keeps the impala UX and points it at NetworkManager, so it...

Vibe Coding and Web Application Security: A Twin-Prompt Study

Large language models increasingly generate complete web applications from natural-language prompts, raising the question of whether explicitly requesting security best practice improves the result. We study six functionally distinct web applications, each generated in two prompt variants that ar...

PT-2026-79465

Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS versions prior to 12.1 Description An HTML injection flaw allows a remote, authenticated attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. HTML injection is a technique where an attacker...

PT-2026-79471

Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS versions prior to 11.6 Description A remote, highly privileged attacker can insert arbitrary HTML into the Portal for ArcGIS Home application. HTML injection is a process where an attacker injects malicious HTML code int...

PT-2026-79499

Name of the Vulnerable Software and Affected Versions Arc Enterprise versions prior to 26.06.1 Description The cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope of inbound messages. The MsgReplicateSync payload is accepted without...

CVE-2026-69229: Improper Neutralization of Input During Web Page Generation

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authenticated attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 and 12.0 are encouraged to patch. All...

CVE-2026-75928: Exposure of Sensitive System Information to an Unauthorized Control Sphere

The Brushfire platform's video content streaming application https://online.brushfire.com exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026...

AIX : Multiple Vulnerabilities (IJ59565)

The version of AIX installed on the remote host is prior to APAR IJ59565. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ59565 advisory. - IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in...

caido v0.58.0

Website • Dashboard • Docs • Roadmap • Branding • Discord 👋 Welcome Welcome to Caido! Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease. Here you can get involved with the development of our software. You can learn about upcoming Caido...

pwnos2-linux-web-pentest

PwnOS2 Linux Web Pentest Authorized penetration-testing case...

AZL-96965 CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-3

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, gitdeltaapply in src/libgit2/delta.c trusts the attacker-controlled ressz value parsed by hdrsz from...

CVE-2026-72844

The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...

py-web-vuln-scanner

No d...

CVE-2026-64960

creationtimestamp| type| source ---|---|--- 2026-08-20 16:15:03+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-64960 2026-08-22 05:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtnk7sd5ur24...

protobufjs: protobufjs: Denial of Service via crafted JSON descriptors

A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the...

[SECURITY] Fedora 44 Update: roundcubemail-1.7.3-1.fc44

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM Guardium Key Lifecycle Manager (GKLM)

Summary WebSphere Application Server and WebSphere Application Server Liberty is shipped as a component of IBM Guardium Key Lifecycle Manager GKLM. Information about security vulnerabilities affecting WebSphere Application Server and WebSphere Application Server Liberty has been published in a...