PT-2026-107950

Ollama is vulnerable to path traversal in the /api/pull endpoint due to insufficient validation of layer digests by the digestToPath function. An unauthenticated remote attacker can specify a path traversal sequence as a layer digest, causing a malicious binary to be written outside the model...

PT-2026-108673

Description When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NO BACKSLASH ESCAPES SQL mode. The server status flag was declared STATUS NO BACKSLASH ESCAPES but never read. Und...

PT-2026-108198

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decode all API can cause the application...

Provable Subexponential Algorithms for NIST Third-Round Lattice Families

We give provable classical subexponential algorithms for secret recovery in growing parameter families associated with NIST third-round lattice candidates. For the Kyber/ML-KEM, FrodoKEM, SABER, NTRU LPRime, and Dilithium/ML-DSA families studied here, polynomial moduli and polylogarithmic...

Protecting CPU AI on Edge TEEs: WebAssembly's Promise and Practical Challenges

AI models on edge hardware contain important intellectual property IP, but an adversary can steal it when they achieve root access. Trusted Execution Environments TEE like Arm TrustZone protect against these Operating System OS level attacks. However, they are challenging to use. More precisely, ...

PT-2026-108144

Name of the Vulnerable Software and Affected Versions MongoDB Go Driver affected versions not specified Description Improper validation of a BSON array length can lead to an out-of-bounds index and runtime panic. This occurs when an application invokes the bson.RawArray.Validate or...

PT-2026-108717

This update fixes the following issues: Release Notes Highlights: - Added a note about the SUSE Registry IP address change. - Update to SUSE Multi-Linux Manager 5.2.1 Security fixes Ubuntu 26.04 LTS Support Confidential Computing Attestation for IBM Z Series New uyuni-tftpd Container Monitoring:...

PT-2026-108718

This update fixes the following issues: Release Notes Highlights: - Added a note about the SUSE Registry IP address change. - Update to SUSE Multi-Linux Manager 5.2.1 Security fixes Ubuntu 26.04 LTS Support Confidential Computing Attestation for IBM Z Series New uyuni-tftpd Container Monitoring:...

CVE-2025-24813

CVE-2025-24813 — Apache Tomcat 部分 PUT 反序列化 RCE 严重性： 严重 CVSS 9.8 需要认证： 无 受影响版本： Apache Tomcat 9.0.0.M1 – 9.0.98 / 10.1.0-M1 – 10.1.34 / 11.0.0-M1 – 11.0.2 修复版本： Tomcat 9.0.99 / 10.1.35 / 11.0.3 工作原理 Apache Tomcat 支持 部分 PUT （通过 Content-Range 进行分块上传）。 当收到部分 PUT 请求时，Tomcat 会将请求体暂存到临时文件中，路径为：...

ghost-hoock

ghost-hoock GhostLock 的一个极简分支，仅保留一个原语 ：通过 CVE-2026-43499（futex PI UAF）关闭 SELinux。 ghost-hoock 在 Samsung A17 上运行 -green 目录 这是什么 工作原理 从原版保留的内容 移除的内容 构建 运行 要求 限制与风险 项目结构 许可证 致谢 链接 这是什么 ghost-hoock 是 Mobile Hacking Lab 的 GhostLock 漏洞利用的精简分支 ，缩减为单一原语： 通过 futex PI UAF 进行一次受限写入 - selinuxenforcing = 0。 没...

Security Bulletin: Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...

bombini

Bombini：基于 eBPF 的安全监控与沙箱代理 Bombini 是一个基于 eBPF 的安全代理，完全使用 Rust 编写，基于 Aya 库，并构建在 LSM（Linux 安全模块）BPF 钩子之上。 其核心采用称为 Detector 的模块化组件，每个组件负责监控和报告特定类型的系统事件。 启用沙箱模式的 Detector 还能直接在内核中阻止被禁止的操作。 为什么选择 Bombini 内核中的过滤器。 规则被编译进 eBPF map 并由 eBPF 程序求值， 因此只有匹配的事件才会到达用户空间。 在内核中阻止，而非事后补救。 沙箱规则由 LSM BPF 钩子强制执行： 被禁止...

Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...

Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine LatexBackendOptionstikzengine="tectonic", the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives. A crafted .tex file can re...

GHSA-X3Q2-H9HX-4R4J Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine LatexBackendOptionstikzengine="tectonic", the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives. A crafted .tex file can re...

USTP-Secure

USTP USTP means UDP Speedy Transmission Protocol. USTP keeps the same authenticated transport model, but the project name is now simply USTP again. By default, USTP uses AEAD for DATA. It also supports an optional negotiated cleartext + HMAC mode for DATA, where payload bytes are visible on the...

GHSA-J9GM-C75J-XC9Q ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer

Summary ImageSharp's TIFF CCITT Group 3 T4 encoder can write beyond its allocated compressed-data buffer when encoding narrow 1-bit images. The unchecked writes can corrupt process memory and terminate the process. This report concerns only the T4 CcittGroup3Fax encoder path. It replaces the prio...

ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer

Summary ImageSharp's TIFF CCITT Group 3 T4 encoder can write beyond its allocated compressed-data buffer when encoding narrow 1-bit images. The unchecked writes can corrupt process memory and terminate the process. This report concerns only the T4 CcittGroup3Fax encoder path. It replaces the prio...

ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index

Summary SixLabors.ImageSharp can terminate a process when an application decodes an attacker-supplied 32-bit floating-point TIFF as Image and applies HistogramEqualization. An IEEE positive-infinity TIFF sample reaches a non-finite or otherwise out-of-range HalfVector4 component, depending on the...

GHSA-J3P4-WP97-RPH4 ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index

Summary SixLabors.ImageSharp can terminate a process when an application decodes an attacker-supplied 32-bit floating-point TIFF as Image and applies HistogramEqualization. An IEEE positive-infinity TIFF sample reaches a non-finite or otherwise out-of-range HalfVector4 component, depending on the...