PYSEC-2026-1904 ScanCode.io command injection in docker image fetch process

Command Injection in docker fetch process Summary A possible command injection in the docker fetch process as it allows to append malicious commands in the dockerreference parameter. Details In the function scanpipe/pipes/fetch.py:fetchdockerimage1 the parameter dockerreference is user...

ScanCode.io command injection in docker image fetch process

Command Injection in docker fetch process SummaryA possible command injection in the docker fetch process as it allows to append malicious commands in the dockerreference parameter. DetailsIn the function scanpipe/pipes/fetch.py:fetchdockerimage1 the parameter dockerreference is user controllable...

PYSEC-2026-1470 jcvi vulnerable to Configuration Injection due to unsanitized user input

Summary A configuration injection happens when user input is considered by the application in an unsanitized format and can reach the configuration file. A malicious user may craft a special payload that may lead to a command injection. PoC The vulnerable code snippet is...

jcvi vulnerable to Configuration Injection due to unsanitized user input

SummaryA configuration injection happens when user input is considered by the application in an unsanitized format and can reach the configuration file. A malicious user may craft a special payload that may lead to a command injection. PoCThe vulnerable code snippet is...

UAT-7810 continues building ORB networks using new malware

Cisco Talos is actively tracking infrastructure and malware associated with UAT-7810, an advanced persistent threat APT actor responsible for maintaining and proliferating the LapDogs Operational Relay Box ORB network, first disclosed by SecurityScorecard in 2025. UAT-7810 is most likely tasked...

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices' web management interfaces, the CERT Coordination Center CERT/CC warned Monday. "An attacker can...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

CVE-2026-42980 Public Disclosure This repository contains the...

Pixel Update Bulletin—July 2026Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2026-07-05 or later address all issues in this bulletin and all issues in the July 2026 Android Securit...

QUBO Modeling of Module Learning with Errors: Stability and Scaling in Post-Quantum Cryptography

Lattice-based post-quantum cryptography relies on the hardness of the Learning With Errors LWE and Module Learning With Errors MLWE problems. This work introduces a constructive framework for encoding small MLWE instances as Quadratic Unconstrained Binary Optimization QUBO models suitable for...

PT-2026-56185

The Dhara flash translation layer disk driver drivers/disk/ftl dhara.c implemented the dhara nand callbacks so that, on a flash error, the error code was written unconditionally through the caller-supplied dhara error t err pointer e.g. err = DHARA E ECC in dhara nand read, and similar in dhara...

📄 Cisco AsyncOS 14.2.0 Privilege Escalation / Local Root

Cisco AsyncOS version 14.2.0 local privilege escalation details that achieve a local root shell. About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Local Privilege Escalation and Shell...

REFORGE: A Method for Benchmarking LLMs' Reverse Engineering Capabilities in Decompiled Binary Function Naming

Large language models LLMs are increasingly applied to reverse-engineering tasks, and recent threat-intelligence reporting shows them operating inside live offensive-security workflows. Claims about their capability, however, outpace our ability to measure it. Existing benchmarks for LLM-assisted...

Important: docker

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator

Summary The tailnet coordinator validates that an agent's Addresses derive from its authenticated UUID but applies no equivalent check to AllowedIPs. The coordinator forwards agent-supplied AllowedIPs verbatim to tunnel peers which install them into the WireGuard peer configuration. Impact A...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the AllowedIPs process. An attacker can intercept network traffic and serve spoofed content by supplying arbitrary AllowedIPs prefixes, allowing them to claim another agent's tailnet address. This is only...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the AllowedIPs process. An attacker can intercept network traffic and serve spoofed content by supplying arbitrary AllowedIPs prefixes, allowing them to claim another agent's tailnet address. This is only...

GHSA-WRQ8-FCV5-8HVP Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator

Summary The tailnet coordinator validates that an agent's Addresses derive from its authenticated UUID but applies no equivalent check to AllowedIPs. The coordinator forwards agent-supplied AllowedIPs verbatim to tunnel peers which install them into the WireGuard peer configuration. Impact A...

Dragonfly scheduler v1 and v2 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFile

Summary The Dragonfly scheduler's v1 gRPC service contains an unauthenticated Server-Side Request Forgery SSRF. When a peer reports a successful download of a TINY task, the scheduler calls Peer.DownloadTinyFile and issues an HTTP GET to a host and port taken verbatim from the attacker-controlled...

GHSA-CHWM-M7G7-685G Dragonfly scheduler v1 and v2 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFile

Summary The Dragonfly scheduler's v1 gRPC service contains an unauthenticated Server-Side Request Forgery SSRF. When a peer reports a successful download of a TINY task, the scheduler calls Peer.DownloadTinyFile and issues an HTTP GET to a host and port taken verbatim from the attacker-controlled...

CVE-2026-11405

The web server binary /bin/httpd contains a hidden backdoor authentication mechanism in the login function at 004c88b8. - The function contains a normal authentication path using MD5/hash-based password verification prodencode64/PasswordToMd5/checkrandkey. - After normal authentication fails, it...