trufflehog v3.98.0

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

[SECURITY] Fedora 45 Update: ocaml-yamlx-0.5.0-2.fc45

A pure-OCaml YAML 1.2 and 1.1 library with a lossless, comment-preserving AST. Features: - Full YAML 1.2 compliance =E2=80=94 passes all 371 tests from the yaml-test- suite. - Pure OCaml =E2=80=94 no C bindings, no external runtime dependencies. - Lossless AST =E2=80=94 the parsed node tree...

[SECURITY] Fedora 45 Update: ocaml-ppx-bin-prot-0.17.1-2.fc45

This package supports generating binary serialization and deserialization functions from type definitions. For more information, see: - https://github.com/janestreet/binprot/blob/master/README.md for the bin-prot format - https://github.com/janestreet/binprot/blob/master/shape/README.md for...

[SECURITY] Fedora 45 Update: ocaml-mccs-1.1.19-10.fc45

mccs which stands for Multi Criteria CUDF Solver is a CUDF problem solver developed at UNS during the European MANCOOSI project. This project contains a stripped-down version of the mccs solver, taken from snapshot 1.1, with a binding as an OCaml library, and building with dune. The binding enabl...

[SECURITY] Fedora 45 Update: ocaml-csexp-1.5.2-22.fc45

This project provides minimal support for parsing and printing S-expressions in canonical form, which is a very simple and canonical binary encoding of S-expressions...

[SECURITY] Fedora 45 Update: ocaml-base64-3.5.2-7.fc45

Base64 is a group of similar binary-to-text encoding schemes that represent binary data in an ASCII string format by translating it into a radix-64 representation. It is specified in RFC 4648...

[SECURITY] Fedora 45 Update: ocaml-bin-prot-0.17.0-14.fc45

This library contains functionality for reading and writing OCaml values in a type-safe binary protocol. These functions are extremely efficient and provide users with a convenient and safe way of performing I/O on any extensionally defined data type. This means that functions, objects, and value...

[SECURITY] Fedora 45 Update: ocaml-biniou-1.2.2-21.fc45

Biniou pronounced "be new" is a binary data format designed for speed, safety, ease of use and backward compatibility as protocols evolve. Biniou is vastly equivalent to JSON in terms of functionality but allows implementations several times faster 4 times faster than yojson, with 25-35% space...

[SECURITY] Fedora 45 Update: ocaml-b0-0.0.6-3.fc45

WARNING: this package is unstable and a work in progress. Do not depend on i t. B0 describes software construction and deployments using modular and customizable definitions written in OCaml. B0 describes: - Build environments. - Software configuration, build and testing. - Source and binary...

[SECURITY] Fedora 45 Update: hivex-1.3.24-23.fc45

Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' in perl-hivex lets you export and merge to...

[SECURITY] Fedora 45 Update: 0install-2.18-16.fc45

Zero Install is a decentralized cross-distribution software installation system. Other features include full support for shared libraries with a SAT solver for dependency resolution, sharing between users, and integration with native platform package managers. It supports both binary and source...

How to fix a bug in a fix

Posted by Natalie Silvanovich Project Zero often works with software vendors to remediate the vulnerabilities we report and provide broader guidance on making software more secure. Some vendors express concern about potential scenarios in which they are unable to fix vulnerabilities that are...

CVE-2026-75819: Out-of-bounds Read

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load in readonlyws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a...

PT-2026-115674

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load in readonly ws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a...

Local Privilege Escalation via Command Injection in Brocade Fabric OS Diagnostic Utility

: An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking underlying system commands through a shell interpreter. A...

PT-2026-106739

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute command tool in ufo/client/mcp/http servers/linux mcp server.py treats sort and uniq as read-only commands while the free-form command parameter can select their...

PT-2026-106710

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8.3 Description An out-of-bounds read exists in the ReadOnlyDict::load function within readonly ws.cpp. The issue occurs when loading a binary .rws dictionary file, as the software uses offset fields from the...

What Response Marginals Miss: Adaptive Query Complexity of Functional Backdoor Recovery

Functional backdoor recovery finds any trigger whose attack success rate is at least a given threshold rather than to recover the planted trigger. We study the minimum number of queries required for this task under label feedback which returns the predicted class label. We construct two finite...

PT-2026-115983

Impact A memory-related vulnerability has been discovered and fixed in the upstream librsvg dependency. When certain runtime-specific conditions apply, this vulnerability can lead to possible remote code execution RCE on glibc-based Linux. Patches Using prebuilt binaries provided by sharp? Most...

Linux Distros Unpatched Vulnerability : CVE-2026-59783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability...