CVE-2026-42204 Coolify: Authenticated RCE via SHELL_SAFE_COMMAND_PATTERN regression → host root

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. From 4.0.0-beta.471 through 4.0.0-beta.473, a regression in SHELLSAFECOMMANDPATTERN allowed ampersands in custom Docker Compose build, start, and pre/post-deployment command fields, allowing an...

Malicious code in howto-gallery-betas (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47676 Malicious code in howto-gallery-betas (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2012-6135

RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process...

Luca Todesco OS X Zero Day Vulnerabilities

Update Luca Todesco still won’t say why he disclosed over the weekend details and proof of concept code for a pair of unpatched and previously unreported OS X vulnerabilities, instead standing firm by his pat response: “I had my reasons.” The 18-year-old Italian researcher, however, is sure his...