rev-dep

Rev-dep Capabilities • Installation • Documentation • Exploratory Toolkit • Newsletter Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI. About 📣 As codebases scale, maintaining...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

EUVD-2026-93999

Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback...

GHSA-XVH9-35W9-42M4 Backstage: Cloud storage catalog locations may cross configured storage boundaries

Impact Catalog entity providers for Azure Blob Storage and AWS S3 did not sufficiently validate storage object paths, which could allow catalog descriptors to be read from outside the intended storage boundary. Access is limited to locations reachable by the backend's configured credentials...

PT-2026-107265

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.54.6 Description Scaffolder source-control actions may not consistently enforce intended credential boundaries. This allows an authenticated user to cause an affected action to fall back to broader integration...

Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level when they followed a key-changing message in the same record. The handshake transcript is still authenticated, so a network-position attacker cannot use this to alter or complete a handshake; the practical effect is tha...

NPM: vm2: NodeVM custom resolution bypasses external path boundaries

NPM: vm2: NodeVM custom resolution bypasses external path boundaries vulnerability discovered by ? in WordPress Npm vm2 versions = 3.12.1...

CVE-2026-105120

OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint query operation that allows realm administrators to list sessions of every realm. Attackers holding delegated RealmAdmin privileges can supply a queryFilter naming another realm to disclose usernames...

CVE-2026-105120

OpenAM before version 16.1.3 is affected by an authorization bypass vulnerability within the sessions REST endpoint query operation. This flaw allows users with delegated RealmAdmin privileges to bypass tenant boundaries by supplying a _queryFilter naming a different realm. Exploitation of this v...

EUVD-2026-92024

OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint query operation that allows realm administrators to list sessions of every realm. Attackers holding delegated RealmAdmin privileges can supply a queryFilter naming another realm to disclose usernames...

Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems

As multi-agent systems enter high-stakes domains, the possibility that agents may circumvent safety boundaries is a growing concern. Prior work has examined this risk primarily in adversarial settings, where agents are instructed or rewarded to communicate covertly and evade oversight. We show th...

EUVD-2026-87659

Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles across workspace boundaries. A builder of a single workspace can exploit missing per-app authorization checks to grant...

CVE-2026-100686

Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles across workspace boundaries. A builder of a single workspace can exploit missing per-app authorization checks to grant...

CVE-2026-91791 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. This can cause the application to access a released page-view object while calculating annotation boundaries, resulting in ...

CVE-2026-91791 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. This can cause the application to access a released page-view object while calculating annotation boundaries, resulting in ...

CVE-2026-91791

Foxit PDF Editor/Reader is susceptible to an invalid memory read and application crash when processing a specially crafted PDF file. The vulnerability is caused by a reentrant execution condition involving JavaScript triggered by page-visibility events , which leads to the application accessing a...

The vulnerability of the Imf::InputFile::readPixels() method in software for storing images in OpenEXR format with a wide dynamic range of brightness levels allows a hacker to cause a service failure.

The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...

The vulnerability of the Imf::InputFile::readPixels() method in software for storing images in OpenEXR format with a wide dynamic range of brightness levels allows a hacker to cause a service failure.

The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...

CVE-2026-21848

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

CVE-2026-21848: Improper Access Control

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...