Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Proftpd

CVE-2010-4221 — ProFTPD TELNET IAC Stack Overflow: From Patch...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 2.0) is affected by multiple vulnerabilities in various components

Summary IBM Cloud Pak for Data System 2.0 includes several open-source, third-party, and containerized components as part of its software stack and system environment. Multiple security vulnerabilities have been identified across various components and libraries, including PLY, pyOpenSSL,...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 2.0)

Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 2.0 have been addressed in version 11.3.1.3-IF4 Vulnerability Details CVEID:CVE-2026-59889 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

KB5122775 - Description of the security update for SQL Server 2017 GDR: September 8, 2026

KB5122775 - Description of the security update for SQL Server 2017 GDR: September 8, 2026 Applies To SQL Server 2017 on Windows SQL Server 2017 on Linux Release date: September 8, 2026 Version: 14.0.2130.4 Summary Known issues in this update Improvements and fixes included in this update How to...

KB5122774 - Description of the security update for SQL Server 2017 CU31: September 8, 2026

KB5122774 - Description of the security update for SQL Server 2017 CU31: September 8, 2026 Applies To SQL Server 2017 on Linux SQL Server 2017 on Windows Release date: September 8, 2026 Version: 14.0.3550.4 Summary Known issues in this update Improvements and fixes included in this update How to...

KB5122773 - Description of the security update for SQL Server 2019 GDR: September 8, 2026

KB5122773 - Description of the security update for SQL Server 2019 GDR: September 8, 2026 Applies To SQL Server 2019 on Windows SQL Server 2019 on Linux Release date: September 8, 2026 Version: 15.0.2190.7 Summary Known issues in this update Improvements and fixes included in this update How to...

KB5122772 - Description of the security update for SQL Server 2019 CU32: September 8, 2026

KB5122772 - Description of the security update for SQL Server 2019 CU32: September 8, 2026 Applies To SQL Server 2019 on Windows SQL Server 2019 on Linux Release date: September 8, 2026 Version: 15.0.4490.9 Summary Known issues in this update Improvements and fixes included in this update How to...

KB5122771 - Description of the security update for SQL Server 2022 GDR: September 8, 2026

KB5122771 - Description of the security update for SQL Server 2022 GDR: September 8, 2026 Applies To SQL Server 2022 on Windows all editions SQL Server 2022 on Linux all editions Release date: September 8, 2026 Version: 16.0.1200.5 Summary Known issues in this update Improvements and fixes includ...

KB5122770 - Description of the security update for SQL Server 2025 GDR: September 8, 2026

KB5122770 - Description of the security update for SQL Server 2025 GDR: September 8, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Release date: September 8, 2026 Version: 17.0.1135.8 Summary Known issues in this update Improvements and fixes...

KB5122769 - Description of the security update for SQL Server 2025 CU8: September 8, 2026

KB5122769 - Description of the security update for SQL Server 2025 CU8: September 8, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Release date: September 8, 2026 Version: 17.0.4085.5 Summary Known issues in this update Improvements and fixes...

KB5122768 - Description of the security update for SQL Server 2022 CU26: September 8, 2026

KB5122768 - Description of the security update for SQL Server 2022 CU26: September 8, 2026 Applies To SQL Server 2022 on Windows all editions SQL Server 2022 on Linux all editions Release date: September 8, 2026 Version: 16.0.4275.2 Summary Known issues in this update Improvements and fixes...

Exploit for Incorrect Permission Assignment for Critical Resource in Acer Nitrosense

From an Acer Named Pipe to NT AUTHORITY\SYSTEM: CVE-2026-8069...

ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

Cisco Talos began an investigation after observing a DLL named "verification.google" executing from WebDAV at a Ukrainian government organization. We assess with moderate confidence that the attacks are not targeted at a particular organization, but are a part of a cryptocurrency and...

raptor v3.1.0

╔═══════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ██████╗ ████████╗ ██████╗ ██████╗ ║ ║ ██╔══██╗██╔══██╗██╔══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ║ ║ ██████╔╝███████║██████╔╝ ██║ ██║ ██║██████╔╝ ║ ║ ██╔══██╗██╔══██║██╔═══╝ ██║ ██║ ██║██╔══██╗ ║ ║ ██║ ██║█...

Duplicate Advisory: knowns vulnerable to command injection

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mc52-mwq4-vfx3. This link is maintained to preserve external references. Original Description knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files...

GHSA-6PH4-R249-58P2 Duplicate Advisory: knowns vulnerable to command injection

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mc52-mwq4-vfx3. This link is maintained to preserve external references. Original Description knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files...

CVE-2026-81192: Untrusted Search Path

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

CVE-2026-86733: Improper Neutralization of Special Elements used in an OS Command

Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client mysql without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as ! as local shell commands. An authenticated...

Android XR Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

The XR Security Bulletin contains details of security vulnerabilities affecting the XR platform. The full XR update comprises the security patch level of 2026-09-05 or later from the September 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage all customers to...

Wear OS Security Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2026-09-05 or later from the September 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage a...