VSHG

VSHG - Hardware resistance & enhanced security for GnuPG. VSHG aims to provide a memory / hardware resistant reinforcement to GnuPG's standared s2k key-derivation-function + a simplified interface for symmetric encryption . About VSHG VSHG Very secure hash generator is a standalone Addon for GnuP...

CTT-Refraction-Vortex-CVE-2026-7731-

CTT-Refraction-Vortex-CVE-2026-7731- Under CTT, we see it as a Temporal Synchronization Mismatch between the Identity Provider and the Service Provider. By injecting a pulse at the \alpha=0.0302011 frequency, we don't bypass the signature—we Refract the Time Window so the signature validates...

CVE-2026-9589

The Collaboration Server in Unblu Spark (versions 7.0 through 8.36.1-hotfix.0) is vulnerable to a missing authorization flaw during configuration cascade operations. The system fails to verify if a user has the necessary permissions to read or modify the configuration of a specific entity. This a...

CVE-2026-9589 Unblu Spark Authorization Bypass in Configuration Cascade Operations

Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through 8.36.1-hotfix.0, on on-premises and cloud deployments, allows an authenticated remote attacker to read and change configuration properties of entities they aren't...

CVE-2026-109340

SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to delete protected graph edges by triggering a REFERENCE ON DELETE CASCADE. Attackers with delete permission on a referenced table can delete a record whose cascade disables permissio...

CVE-2026-109340 SurrealDB 3.1.0 before 3.3.0 Authorization Bypass via REFERENCE ON DELETE CASCADE

SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to delete protected graph edges by triggering a REFERENCE ON DELETE CASCADE. Attackers with delete permission on a referenced table can delete a record whose cascade disables permissio...

CVE-2026-109340

SurrealDB versions 3.1.0 before 3.3.0 are vulnerable to an authorization bypass (CWE-862). The flaw allows authenticated users to delete protected graph edges by triggering a REFERENCE ON DELETE CASCADE . Specifically, an attacker with delete permissions on a referenced table can delete a record ...

EUVD-2026-97642

SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to delete protected graph edges by triggering a REFERENCE ON DELETE CASCADE. Attackers with delete permission on a referenced table can delete a record whose cascade disables permissio...

CVE-2026-109340

SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to delete protected graph edges by triggering a REFERENCE ON DELETE CASCADE. Attackers with delete permission on a referenced table can delete a record whose cascade disables permissio...

CVE-2026-109340 SurrealDB 3.1.0 before 3.3.0 Authorization Bypass via REFERENCE ON DELETE CASCADE

SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to delete protected graph edges by triggering a REFERENCE ON DELETE CASCADE. Attackers with delete permission on a referenced table can delete a record whose cascade disables permissio...

PT-2026-110757

Name of the Vulnerable Software and Affected Versions SurrealDB versions 3.1.0 through 3.2.x Description An authorization bypass allows authenticated users to delete protected graph edges. This occurs when a user with delete permissions on a referenced table triggers a REFERENCE ON DELETE CASCADE...

CVE-2026-109340: Missing Authorization

SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to delete protected graph edges by triggering a REFERENCE ON DELETE CASCADE. Attackers with delete permission on a referenced table can delete a record whose cascade disables permissio...

EUVD-2026-87217

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, this issue concerns a lack of discursive validation within the authorization cascade. It has been determined that the system-level enforcement of access restrictions during the initialization of new...

PT-2026-98947

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Zammad versions prior to 7.1.0 Description Zammad is a web-based open source helpdesk and customer support system. The issue involves a lack of discursive validation within the authorization cascade, where...

Toward Responsible AI-Augmented Cyber Defense: Pattern Recognition, Defense-In-Depth, and the Case for Human-AI Collaboration

Cybersecurity literature has extensively documented the operational benefits of artificial intelligence AI for threat detection, incident response, and prevention, while raising qualitative concerns about over-automation, algorithmic bias, and analyst-skill erosion. What remains largely absent is...

CASCADE against Jailbreaks: Combination across Stages with Controlled Attack-Defense Evaluation

Defenses against jailbreak attacks on Large Language Models LLMs operate at different pipeline stages, such as input modification or output guard, but it remains unclear which defenses to deploy at each stage and how to combine them. Prior empirical studies, fragmented by inconsistent...

Malicious code in labyrinth-cascade-hrg076-project (npm)

The package labyrinth-cascade-hrg076-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in iguana-cascade-inq333-project (npm)

The package iguana-cascade-inq333-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in essence-dszwm-d3xs1-cascade-project (npm)

The package essence-dszwm-d3xs1-cascade-project was found to contain malicious code. --- Credit: OpenSSF source...

django-shop (1.2.4), djangocms-algolia (>=0.1.0.0, <=1.3.2.0) +8 more potentially affected by CVE-2026-54625 via django-cms (3.11.3)

django-cms PYPI version 3.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-cms and may be impacted: - django-shop 1.2.4 - djangocms-algolia =0.1.0.0, =1.0.0, =1.0.0, =0.2.0.0, =0.0.0.1, =1.0.0.0 - djangoshop-gestpay 0.1.0 - djangoshop-wspay...