CVE-2026-78454: Out-of-bounds Read

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...

CVE-2026-69283: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...

PT-2026-88012

Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack...

PT-2026-87567

Name of the Vulnerable Software and Affected Versions Windows CD-ROM Driver affected versions not specified Description An out-of-bounds read in the Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs when the software reads data past th...

PT-2026-87998

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...

PT-2026-87330

Name of the Vulnerable Software and Affected Versions Windows CD-ROM Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows CD-ROM Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer...

shannon v3.1.0

!NOTE Cyber verification for Anthropic and OpenAI models: complete your provider's cyber verification program to prevent model failures and refusals during cyber workloads. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths,...

safe-chain v1.5.16

Aikido Safe Chain ✅ Block malware on developer laptops and CI/CD ✅ Supports npm and PyPI more package managers coming ✅ Blocks packages newer than 48 hours without breaking your build ✅ Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...

CVE-2024-58376

A flaw was found in Renovate's helmv3 manager. This command injection vulnerability allows an attacker with commit access to a repository to execute arbitrary commands. By manipulating registryAliases keys with unquoted shell metacharacters, an attacker can inject commands during helm repo add...

EUVD-2026-71259

IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily large or computationallyexpensive requests that cause the LLM agent workers to be held for extended periods — rangingfrom tens of seconds to over ten minutes per request. When...

strix v1.6.1

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilities on every pull request and block insecure cod...

CVE-2026-19645: Uncontrolled Resource Consumption

IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily large or computationallyexpensive requests that cause the LLM agent workers to be held for extended periods — rangingfrom tens of seconds to over ten minutes per request. When...

Dependency Scanning v2.1.1

Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...

Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means

In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentials across 469 locations across developer environments, Continuous Integration/Continuous Deployment CI/CD tooling, cloud configurations, and even AI tool configs...

CICD-Goat-Vapt-Writeup — Updated!

CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Repository| What's in...

CLEANSTART-2026-WY48690 Security fixes in argo-cd 3.4.7-r2

Package argo-cd version 3.4.7-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-OO93790 Security fixes in argo-cd 3.4.6-r0

Package argo-cd version 3.4.6-r0 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-LO94255 Security fixes in argo-cd 3.3.14-r3

Package argo-cd version 3.3.14-r3 fixes 2 vulnerabilities: CVE-2026-50163, CVE-2026-41178...

CLEANSTART-2026-SU87029 Security fixes in argo-cd 3.3.12-r4

Package argo-cd version 3.3.12-r4 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-IQ94380 Security fixes in argo-cd 3.4.7-r1

Package argo-cd version 3.4.7-r1 fixes 5 vulnerabilities: CVE-2026-71556, CVE-2026-71557, ghsa-hrxh-6v49-42gf, CVE-2026-50163, CVE-2026-41178...