CVE-2026-55767

A flaw was found in Guzzle, an extensible PHP HTTP client. The CookieJar component incorrectly accepted cookies with dot-only or whitespace-padded domain attributes. This vulnerability allows an attacker-controlled origin, when an application requests it with a shared cookie jar, to set a cookie...

DEBIAN-CVE-2023-4154

A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers RODCs. This flaw allows RODCs and users possessing the GETCHANGES right to access all attributes, including sensitive...