PT-2026-27403

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description An undefined behavior exists within the WebRTC: Signaling component. This issue impacts the...

PT-2026-29136

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.2 Description FreeRDP is a free implementation of the Remote Desktop Protocol. The progressive decompress tile upgrade function detects a mismatch through progressive rfx quant cmp equal but only emits a warning,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992752)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992752 advisory. In the Linux kernel, the following vulnerability has been resolved: blkiocost: fix more out of bound shifts Recently running UBSAN caught few out of bound shifts in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993042 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix undefined behavior in bit shift for mdiobusregister Shifting signed 32-bit value b...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992948)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992948 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix aqvec index out of range error The final update statement of the for loop...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992836 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d NFS:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992177 advisory. In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: fix UBSAN shift-out-of-bounds issue When value timeunit, the parameter of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992541 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid undefined behavior: applying zero offset to null pointer ACPICA commit...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from reuse after release and could lead to undefined behavior...

CVE-2023-54168: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in setusersqsize The ucmd-logsqbbcount variable is controlled by the user so this shift can wrap. Fix it by using checkshloverflow in the same way that it was done in commit 515f60004ed9 "RDMA/hn...

Application-Specific Power Side-Channel Attacks and Countermeasures: A Survey

Side-channel attacks try to extract secret information from a system by analyzing different side-channel signatures, such as power consumption, electromagnetic emanation, thermal dissipation, acoustics, time, etc. Power-based side-channel attack is one of the most prominent side-channel attacks i...

VIPSQLi

🔥 VIP SQLi Scanner - Professional Triage Tool REAL SQLi PEH...

Friday Squid Blogging: Squid Camouflage

New research: Abstract: Coleoid cephalopods have the most elaborate camouflage system in the animal kingdom. This enables them to hide from or deceive both predators and prey. Most studies have focused on benthic species of octopus and cuttlefish, while studies on squid focused mainly on the...

ruint affected by unsoundness of safe `reciprocal_mg10`

The function reciprocalmg10 is marked as safe but can trigger undefined behavior out-of-bounds access because it relies on debugassert! for safety checks instead of assert!. When compiled in release mode, the debugassert! is optimized out, potentially allowing invalid inputs to cause memory...

PT-2025-62945

The function reciprocal mg10 is marked as safe but can trigger undefined behavior out-of-bounds access because it relies on debug assert! for safety checks instead of assert!. When compiled in release mode, the debug assert! is optimized out, potentially allowing invalid inputs to cause memory...

Linux Distros Unpatched Vulnerability : CVE-2025-68350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - exfat: fix divide-by-zero in exfatallocatebitmap The variable maxracount can be 0 in exfatallocatebitmap, which causes a divide-by-zero error in the subsequent...

Malicious code in bettermode-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea8112bbccd7b047a03169d6591f7ab7f756044a4203b2435152fe708cad5d5 The package bettermode-icons was found to contain malicious code. Source: ossf-package-analysis...

RUSTSEC-2025-0167 `Bitmap::try_from(&[u8])` can create invalid values

The TryFrom implementation for Bitmap copies the input bytes into an uninitialized backing store and calls assumeinit without validating that the bytes form a valid value of the backing store type. For SIZE = 1 the backing store is a bool, so any input byte other than 0x00 or 0x01 produces an...

`Bitmap::try_from(&[u8])` can create invalid values

The TryFrom implementation for Bitmap copies the input bytes into an uninitialized backing store and calls assumeinit without validating that the bytes form a valid value of the backing store type. For SIZE = 1 the backing store is a bool, so any input byte other than 0x00 or 0x01 produces an...

openbabel:fuzz_obconversion_sdf: Bad-cast to OBRingData from OpenBabel::OBPairData in OpenBabel::OBMol::GetSSSR

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4904772219240448 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzobconversionsdf Job Type: libfuzzerubsanopenbabel Platform Id: linux Crash Type: Bad-cast Crash Address:...