Security update for dnsmasq

This update for dnsmasq fixes the following issues CVE-2026-12725: heap buffer overflow in logquery when logging unsupported DS/DNSKEY replies bsc1268764. CVE-2026-12969: out-of-bounds read in findsoa due to missing extrabytes validation bsc1268882. Changes for dnsmasq: Update to 2.93: Fix a...

Security update for tiff

This update for tiff fixes the following issues CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image bsc1269779. CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value bsc1268434. Patch...

Security Bulletin: Vulnerabilities in python (CVE-2026-56131, CVE-2026-56132) affects AIX/VIOS.

Summary Use after free and heap buffer overflow may casue denial of service. Vulnerability Details CVEID:CVE-2026-56131 DESCRIPTION: libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can...

Security update for python-cryptography

This update for python-cryptography fixes the following issues CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270208. CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust-...

Security update for sssd

This update for sssd fixes the following issues CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation bsc1270709. CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypas...

Security update for ImageMagick

This update for ImageMagick fixes the following issues CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. CVE-2026-42326: information disclosure via malicious IPTC input file bsc1268092. CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder bsc1268094...

SUSE-SU-2026:3024-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. - CVE-2026-42326: information disclosure via malicious IPTC input file bsc1268092. - CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder bsc1268094. ...

Security update for ImageMagick

This update for ImageMagick fixes the following issues CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. CVE-2026-42326: information disclosure via malicious IPTC input file bsc1268092. CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder bsc1268094...

SUSE-SU-2026:3023-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. - CVE-2026-42326: information disclosure via malicious IPTC input file bsc1268092. - CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder bsc1268094. ...

Security update for sccache

This update for sccache fixes the following issues: Update to version 0.15.017. CVE-2023-26964: hyper,h2: high resource consumption due to stream stacking when H2 component processes HTTP2 RSTSTREAM frames bsc1210346. CVE-2024-32650: rust-rustls: infinite loop in...

Security update for uriparser

This update for uriparser fixes the following issues CVE-2026-42371: numeric truncation in text range comparison when an application accepts URIs with a length in gigabytes bsc1262999. CVE-2026-44927: truncation of ptrdifft to int in various places bsc1264578. CVE-2026-44928: function family...

Security Bulletin: Vulnerability in python (CVE-2026-50219) affects AIX/VIOS.

Summary Use-after-free can casue denial of service. Vulnerability Details CVEID:CVE-2026-50219 DESCRIPTION: libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLGetBuffer, XMLParse, XMLParseBuffer, XMLParserFree, or XMLParserReset from within handlers in cases of a policy...

Exploit for Improper Authentication in Google Android

BT-HID-PoC — CVE-2023-45866 Interactive Wizard DISCLAIMER...

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, SafeDep, Socket, and StepSecurity. The affected packages are listed below - @asyncapi/[email protected]...

Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues The following security issues were fixed: CVE-2026-31685: netfilter: ip6teui64: reject invalid MAC header for all packets bsc1263670. CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new...

This fake Apple app can unlock your Mac’s password vault

CrashStealer is a new macOS infostealer that masquerades as Apple’s CrashReporter component, uses an Apple‑notarized installer to slip past Gatekeeper, tricks users into handing over their password, and then systematically loots browsers, password managers, crypto wallets, and Keychain secrets...

Web-Binary-Exploitation-Security-Assessment

Web & Binary Exploitation — Security Assessment Coursework fr...

Exploit for Deserialization of Untrusted Data in Metabase

CVE-2026-59827 — Unsafe Deserialization of H2 Query Results in...

Security Bulletin: Vulnerability in python (CVE-2026-41080) affects AIX/VIOS.

Summary Denial of service through hash flooding via a crafted XML document. Vulnerability Details CVEID:CVE-2026-41080 DESCRIPTION: libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document. CWE:CWE-331: Insufficient Entropy CVSS Source:...

Security Bulletin: Vulnerability in python (CVE-2026-45186) affects AIX/VIOS.

Summary Denial of service via moderately sized crafted XML input. Vulnerability Details CVEID:CVE-2026-45186 DESCRIPTION: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. CWE:CWE-407:...