CVE-2026-73450

On affected Arista EOS platforms with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the heartbeat network segment can send crafted UDP packets to corrupt the dual-primary state. If the MLAG primary switch fails while these packets are present, the secondary sw...

EUVD-2026-80083

On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...

CVE-2026-73450 Security Advisory 0161

On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...

SQLi_PW

SQLi SQL injection là gì? SQL Injection SQLi là một lỗ h...

CVE-2026-20290: Buffer Access with Incorrect Length Value

A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 2 Detection Engine to restart. This vulnerability is due to incomplete validation of the SSL...

CISA: Using Cyber Decoys to Strengthen Detection and Response

CISA developed this guidance to help defensive teams at varying levels of cybersecurity maturity plan and implement cyber decoy strategies that strengthen their detection and response capabilities. Many organizations struggle to detect adversaries who use legitimate credentials, native tools, and...

CVE-2026-73450: Insufficient Verification of Data Authenticity

On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...

PT-2026-93974

A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 2 Detection Engine to restart. This vulnerability is due to incomplete validation of the SSL...

PT-2026-93259

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description An unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state of platforms running Arist...

macnoise v1.0.0

MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...

reasongate v0.4.0

ReasonGate A self-hostable gate that inspects the text going into and out of an LLM and returns an explainable allow / flag / block decision with a machine-readable audit record for every call. What this is The open-source core is rule-based. It does four things: recognizes known prompt-injection...

CVE-2026-73952

creationtimestamp| type| source ---|---|--- 2026-09-15 22:10:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnc6b3i22f 2026-09-23 09:50:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11 2026-09-23 14:07:07+00:00| seen|...

CVE-2026-76682

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...

CVE-2026-76682 Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...

CVE-2026-76682

CVE-2026-76682 affects HPE Networking EdgeConnect SD-WAN Gateways , specifically the network security monitoring component of its intrusion detection systems. The root cause is a limited buffer overflow that an unauthenticated remote attacker can exploit over the network. Successful exploitation ...

EUVD-2026-79208

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...

craready-test-java-vulns

craready-test-java-vulns Módulo de prueba del escáner SBOM/CVE de CRAReady — NO USAR EN PRODUCCIÓN Este repositorio contiene dependencias Java Maven intencionalmente vulnerables para probar el pipeline de generación de SBOM y detección de vulnerabilidades de CRAReady. Incluye algunos de los CVEs...

CVE-2026-91967: Server-Side Request Forgery (SSRF)

AVideo through 29.0 contains a blind server-side request forgery vulnerability in the getHeaderContentTypeFromURL function that issues getheaders calls guarded only by format validation. Authenticated users with canUpload permission can store attacker-chosen URLs as video links, triggering...

Cybersecurity in Power Grids: Standards and Research Challenges

This paper examines Smart Grid cybersecurity, emphasizing the critical distinctions between IT and OT environments. It analyzes grid architecture, substation threats, and key international standards, specifically IEC 62351, IEC 62443, and ISO 27001. Finally, it overviews latest research trends,...

SEMA-GUARD: Semantic and Graph-Based Vulnerability Detection in Assembly Code

In cases where source code is not available, such as malware analysis, firmware analysis, and embedded systems analysis, vulnerability detection in compiled programs has gained importance. Current methods are heavily reliant on syntactical regularities or higher level representations that are...