PT-2026-110913

Name of the Vulnerable Software and Affected Versions Apache Allura versions prior to 1.22.0 Description An OAuth1 Request Replay Attack issue exists in Apache Allura. This allows an attacker to reuse a previously captured request to perform unauthorized actions. Recommendations Upgrade to versio...

ROS-20261012-73-0040

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-118131

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...

HPESBNS05148 rev.1 - HPE NonStop Servers, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, memory corruption, Buffer Overflow, Stack Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NONSTOP KERNEL T9050 - T9050L02^BBP, T9050L02^BBS EXPAND T9057 - T9057L02^AIG and earlier XDR Streams T0248 - T0248L01^AAD an...

COMPASS: Membership Inference Attack against Vision Large Language Models Via Adaptive Noise Calibration

Vision large language models VLLMs are deployed in privacy-sensitive domains, raising training-data exposure concerns. Existing gray-box membership inference attacks MIAs commonly rely on entropy statistics or generated descriptions, requiring costly generation with limited membership separation...

SSM-Attack: Learning Where to Perturb for Black-Box Face Privacy

Face recognition systems are deployed widely enough that a photograph shared online can be matched without its subject's consent. Generator-based protection methods rely on heavy pretrained backbones, multi-stage inference or visible semantic edits. We introduce SSM-Attack, a black-box face priva...

ML-Assisted Power Side-Channel Attacks on ML Accelerators in Shared FPGAs

Cloud providers offer on-demand access to Field-Programmable Gate Arrays FPGAs, and multi-tenant FPGAs let multiple users share one device to improve utilization. This sharing introduces security risks: an adversary co-located with a victim on the same FPGA can mount power side-channel attacks...

PT-2026-118133

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...

TencentOS Server 3: apr-util (TSSA-2026:1149)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1149 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

EulerOS 2.0 SP11 : apr-util (EulerOS-SA-2026-4302)

According to the versions of the apr-util packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility:...

macOS Buffer Overflow DoS

The vulnerability of macOS operating systems lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

SonicWall SMA1000 SRF Unauthorized Access

The vulnerability of the Appliance WorkPlace microprogramming-based network interface of SonicWall SMA1000 relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute an SRF attack and gain unauthorized access to protected...

Cisco NX-OS Information Disclosure

The vulnerability of the Cisco NX-OS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

Cisco Meraki

The vulnerability of Cisco Meraki network device software relates to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

GnuTLS check_for_unknown_exts MITM DoS

The vulnerability of the checkforunknownexts function in the GnuTLS cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to perform a MITM attack or cause service denial...

Linux net/tipc/bearer ipvlan_hard_header Heap Buffer Overflow

The vulnerability of the ipvlanhardheader function in the net/tipc/bearer.c component of the Linux operating system is related to the pointer being dereferenced after its expiration. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

CentOS Linux 8.5 [TuxCare] Security Update: sudo / sudo-devel (CENTOS8.5:CLSA-2026:1791794851)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791794851 advisory. - A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailin...

EulerOS 2.0 SP11 : bind (EulerOS-SA-2026-4304)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker...

EulerOS 2.0 SP13 : apr-util (EulerOS-SA-2026-4120)

According to the versions of the apr-util packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons,...

EulerOS 2.0 SP13 : sqlite (EulerOS-SA-2026-4109)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset...