rockhopper Buffer Overflow vulnerability

A vulnerability, which was classified as critical, has been found in bwoodsend rockhopper up to 0.1.2. Affected by this issue is the function countrows of the file rockhopper/src/raggedarray.c of the component Binary Parser. The manipulation of the argument raw leads to buffer overflow. Local...

pgAdmin Remote Code Execution (RCE) vulnerability

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

PYSEC-2026-1767 pgAdmin Remote Code Execution (RCE) vulnerability

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

python-multipart vulnerable to Content-Type Header ReDoS

SummaryWhen using form data, python-multipart uses a Regular Expression to parse the HTTP Content-Type header, including options.An attacker could send a custom-made Content-Type option that is very difficult for the RegEx to process, consuming CPU resources and stalling indefinitely minutes or...

PYSEC-2026-1850 python-multipart vulnerable to Content-Type Header ReDoS

Summary When using form data, python-multipart uses a Regular Expression to parse the HTTP Content-Type header, including options. An attacker could send a custom-made Content-Type option that is very difficult for the RegEx to process, consuming CPU resources and stalling indefinitely minutes or...

PYSEC-2026-1904 ScanCode.io command injection in docker image fetch process

Command Injection in docker fetch process Summary A possible command injection in the docker fetch process as it allows to append malicious commands in the dockerreference parameter. Details In the function scanpipe/pipes/fetch.py:fetchdockerimage1 the parameter dockerreference is user...

ScanCode.io command injection in docker image fetch process

Command Injection in docker fetch process SummaryA possible command injection in the docker fetch process as it allows to append malicious commands in the dockerreference parameter. DetailsIn the function scanpipe/pipes/fetch.py:fetchdockerimage1 the parameter dockerreference is user controllable...

PYSEC-2026-1470 jcvi vulnerable to Configuration Injection due to unsanitized user input

Summary A configuration injection happens when user input is considered by the application in an unsanitized format and can reach the configuration file. A malicious user may craft a special payload that may lead to a command injection. PoC The vulnerable code snippet is...

jcvi vulnerable to Configuration Injection due to unsanitized user input

SummaryA configuration injection happens when user input is considered by the application in an unsanitized format and can reach the configuration file. A malicious user may craft a special payload that may lead to a command injection. PoCThe vulnerable code snippet is...

UAT-7810 continues building ORB networks using new malware

Cisco Talos is actively tracking infrastructure and malware associated with UAT-7810, an advanced persistent threat APT actor responsible for maintaining and proliferating the LapDogs Operational Relay Box ORB network, first disclosed by SecurityScorecard in 2025. UAT-7810 is most likely tasked...

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices' web management interfaces, the CERT Coordination Center CERT/CC warned Monday. "An attacker can...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

CVE-2026-42980 Public Disclosure This repository contains the...

Pixel Update Bulletin—July 2026Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2026-07-05 or later address all issues in this bulletin and all issues in the July 2026 Android Securit...

PT-2026-56185

The Dhara flash translation layer disk driver drivers/disk/ftl dhara.c implemented the dhara nand callbacks so that, on a flash error, the error code was written unconditionally through the caller-supplied dhara error t err pointer e.g. err = DHARA E ECC in dhara nand read, and similar in dhara...

📄 Cisco AsyncOS 14.2.0 Privilege Escalation / Local Root

Cisco AsyncOS version 14.2.0 local privilege escalation details that achieve a local root shell. About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Local Privilege Escalation and Shell...

QUBO Modeling of Module Learning with Errors: Stability and Scaling in Post-Quantum Cryptography

Lattice-based post-quantum cryptography relies on the hardness of the Learning With Errors LWE and Module Learning With Errors MLWE problems. This work introduces a constructive framework for encoding small MLWE instances as Quadratic Unconstrained Binary Optimization QUBO models suitable for...

REFORGE: A Method for Benchmarking LLMs' Reverse Engineering Capabilities in Decompiled Binary Function Naming

Large language models LLMs are increasingly applied to reverse-engineering tasks, and recent threat-intelligence reporting shows them operating inside live offensive-security workflows. Claims about their capability, however, outpace our ability to measure it. Existing benchmarks for LLM-assisted...

Important: docker

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator

Summary The tailnet coordinator validates that an agent's Addresses derive from its authenticated UUID but applies no equivalent check to AllowedIPs. The coordinator forwards agent-supplied AllowedIPs verbatim to tunnel peers which install them into the WireGuard peer configuration. Impact A...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the AllowedIPs process. An attacker can intercept network traffic and serve spoofed content by supplying arbitrary AllowedIPs prefixes, allowing them to claim another agent's tailnet address. This is only...