Exact Compilation and Resource Laws for Hidden Integer Feedback

Hidden randomized rounding couples the privacy loss of successive integer releases. We study a rational-feedback mechanism under predictable signed-unit participation and full observation of every physical output. A preparation's lifetime connects three results. First, preserving complete carries...

CLSA-2026-1792361363 TuxCare security update for @babel/helper-compilation-targets (1 CVE)

TuxCare rebuilt @babel/helper-compilation-targets to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792361364 TuxCare security update for @babel/helper-compilation-targets (2 CVEs)

TuxCare rebuilt @babel/helper-compilation-targets to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792361351 TuxCare security update for @babel/helper-compilation-targets (1 CVE)

TuxCare rebuilt @babel/helper-compilation-targets to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792361350 TuxCare security update for @babel/helper-compilation-targets (1 CVE)

TuxCare rebuilt @babel/helper-compilation-targets to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

Astra Linux – Vulnerability in Firefox

JIT compilation errors in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3...

Astra Linux – Vulnerability in zlib, libz-mingw-w64

Before version 1.2.12, zlib allowed memory corruption during deflation i.e., when compressing if the input contained many distant matches...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: idmouse: fixed an issue where an uninitialized value was present in idmouseopen. In idmousecreateimage, if any ftipcommand fails, it will proceed to the reset label. However, this results in the data in...

Exploit for Type Confusion in Apple Safari

CVE-2024-23222 PoC - Write-up: https://jamezx32.github.io/...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via redundant regular expression compilation in query parameter decoding

A flaw was found in kin-openapi. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending requests containing a large number of query parameters to an affected endpoint. Due to redundant regular expression compilation within the parameter decoding loop, processing these...

hugo: Hugo: Information disclosure via path traversal during asset compilation

A flaw was found in Hugo. This vulnerability allows an attacker to cause unauthorized information disclosure through path traversal when processing untrusted themes or modules. By supplying relative file paths or symbolic links that reference locations outside the project directory, an attacker c...

java-stager

java-stager Un Stager Java de PoC que puede descargar, compilar y ejecutar un archivo Java en memoria. Esto es solo para fines de investigación, no lo uses donde no estés autorizado. ¿Qué es esto? Esto se basa en el trabajo de James Williams de su charla "Next Gen AV vs My Shitty Code" disponible...

vue-template-compiler-patched

vue-template-compiler-patched A security-patched version of vue-template-compiler to fix the prototype pollution vulnerability CVE-2024-6783 and the ReDoS vulnerability CVE-2024-9506. Based on [email protected]. Development and issues live in vue-patched. Related If you use the Vue full buil...

community-id-spec

Hashing dei flussi Community ID Quando si elaborano dati di flusso da una varietà di applicazioni come Zeek e Suricata, è spesso desiderabile spostarsi rapidamente da un dataset all'altro. Sebbene le informazioni sulla tupla di flusso richieste siano solitamente presenti nei dataset, i dettagli d...

hershell

Hershell Shell reverso TCP simple escrito en Go. Utiliza TLS para asegurar las comunicaciones y proporciona una función de fijación de huella digital de clave pública del certificado, evitando la interceptación del tráfico. Los sistemas operativos compatibles son: Windows Linux Mac OS FreeBSD y...

hershell

Hershell NOTA: el proyecto ha sido bifurcado en este repositorio, revise allí para cualquier otro desarrollo. Hershell es un simple shell reverso TCP escrito en Go. Utiliza TLS para asegurar las comunicaciones y ofrece una función de fijación de huella digital de clave pública del certificado,...

drow

drow Beschreibung TL;DR drow ist ein Kommandozeilenwerkzeug, das zum Injizieren von Code und zum Haken des Einstiegspunkts von ELF-Programmen nach dem Build verwendet wird. Es nimmt unveränderte ELF-Programme als Eingabe und exportiert eine modifizierte ELF-Datei, die eine benutzergegebene Nutzla...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via redundant regular expression compilation in query parameter decoding

A flaw was found in kin-openapi. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending requests containing a large number of query parameters to an affected endpoint. Due to redundant regular expression compilation within the parameter decoding loop, processing these...

EUVD-2026-92847

vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service 3 sites...

PYSEC-2026-4199

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by t...