claude_opus_cve_2023_0266

Demonstration that Claude 3 Opus does not understand CVE-2023-0266 and does not find it Demo 1. Even if told where the bug is Opus does not find it, and hallucinates the presence of lock acquisitions Demo 2. "Prompt engineering" aka telling the LLM exactly how to find the bug also doesn't work De...

Important: Red Hat Security Advisory: compat-openssl10 security update

An update for compat-openssl10 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Important: compat-rpm-411

Issue Overview: A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a % macro construct causes rpm to execute an attacker-controlled shell command via popen while relocating the source file list. This allows arbitrary comman...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Rocky Linux 9.6 [CIQ] Security Update: compat-openssl11 (ciqsa-2026_1776)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261776 advisory. This advisory aggregates security fixes for the compat-openssl11 SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-54874. Tenable has extracted the preceding...

Alibaba Cloud Linux 3 : 0336: compat-openssl10 (ALINUX3-SA-2026:0336)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0336 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-84782: Issue summary: The DTLS...

Rocky Linux 9.6 [CIQ] Security Update: compat-openssl11 Multiple Vulnerabilities (ciqsa-2026_1774)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261774 advisory. This advisory aggregates security fixes for the compat-openssl11 SRPM in CIQ LTS 9.6. It addresses 6 CVEs: CVE-2025-69419, CVE-2022-0778, CVE-2026-45447,...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Amazon Linux 2 : compat-rpm-411 (ALASMOCK2-2026-004)

The version of compat-rpm-411 installed on the remote host is prior to 4.11.3-40. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MOCK2-2026-004 advisory. A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed...

Important: compat-rpm-411

Issue Overview: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote attacker to execute arbitrary code on the system by convincing a user to build a malicious...

CVE-2026-113481 Media Library Assistant < 3.44 - Subscriber+ Missing Authorization via mla-fill-compat-fields

The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a post before disclosing which taxonomy terms are assigned to it, allowing any authenticated user, such as a subscriber, to learn the term assignments of private attachments and pos...

CVE-2026-113481 Media Library Assistant < 3.44 - Subscriber+ Missing Authorization via mla-fill-compat-fields

The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a post before disclosing which taxonomy terms are assigned to it, allowing any authenticated user, such as a subscriber, to learn the term assignments of private attachments and pos...

CVE-2026-113481

The Media Library Assistant WordPress plugin versions before 3.44 is vulnerable to a Missing Authorization (CWE-862) flaw. The plugin fails to verify if a requesting user has permission to view a post before disclosing the taxonomy terms assigned to it. This allows any authenticated user , such a...

CLEANSTART-2024-CC05960 OpenSSL 1

Security vulnerability affects the openssl1.1-compat package. OpenSSL 1...

CLEANSTART-2024-YU07393 Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths

Security vulnerability affects the openssl1.1-compat package. Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths...

CLEANSTART-2024-SZ20427 OpenSSL 1

Security vulnerability affects the openssl1.1-compat package. OpenSSL 1...

CLEANSTART-2024-VO98804 OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate

Security vulnerability affects the openssl1.1-compat package. The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate...

CLEANSTART-2024-DF62846 X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain

Security vulnerability affects the openssl1.1-compat package. The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain...

CLEANSTART-2024-VG28005 ASN

Security vulnerability affects the openssl1.1-compat package. ASN...

CLEANSTART-2024-SQ99185 public API function BIO_new_NDEF is a helper function used for streaming ASN

Security vulnerability affects the openssl1.1-compat package. The public API function BIOnewNDEF is a helper function used for streaming ASN...