40337 matches found
PT-2026-64982
Name of the Vulnerable Software and Affected Versions sqlite version 3.41 Description A use-after-free issue exists in the JSON extraction function. The problem occurs when the program continues to access internal members of a freed pointer after the JsonParse object memory has been released via...
PT-2026-65036
Vault’s SSH secrets engine did not require the valid principals list to contain a value by default. If the valid principals and default user fields of the SSH secrets engine configuration are not set, an SSH certificate requested by an authorized user to Vault’s SSH secrets engine could be used t...
About the security content of tvOS 26.6
About the security content of tvOS 26.6 This document describes the security content of tvOS 26.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
PT-2026-118186
Уязвимость обработчика JavaScript-сценариев V8 браузеров Google Chrome и Microsoft Edge связана с некорректным вычислением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью специально созданной HTML-страницы...
About the security content of iOS 26.6 and iPadOS 26.6
About the security content of iOS 26.6 and iPadOS 26.6 This document describes the security content of iOS 26.6 and iPadOS 26.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
PT-2026-88589
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Memory corruption in V8, the open-source JavaScript and WebAssembly engine, allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted Chrome...
Crow-Eye v0.12.5
Crow-Eye — Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect — it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview ✨ Highlights 👥 Who Crow-Eye Is For ...
SUSE CVE-2026-64530
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle tcfclassify can return TCACTCONSUMED while the skb is held by the defragmentation engine e.g. actct on out-of-order fragments. When that happens the skb is no longer owne...
php:php-fuzz-parser: Use-of-uninitialized-value in zend_get_compiled_lineno
Detailed Report: https://oss-fuzz.com/testcase?key=5443241508667392 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zendgetcompiledlineno getfilenamelineno...
Malicious code in 2klic-api-engine (npm)
The package 2klic-api-engine was found to contain malicious code. --- Credit: OpenSSF source...
Malicious Package
Overview 2klic-api-engine is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2026-64530
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle tcfclassify can return TCACTCONSUMED while the skb is held by the defragmentation engine e.g. actct on out-of-order fragments. When that happens the skb is no longer owne...
CVE-2026-64530
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle tcfclassify can return TCACTCONSUMED while the skb is held by the defragmentation engine e.g. actct on out-of-order fragments. When that happens the skb is no longer owne...
muad-dib v2.11.179
Installation | Usage | Features | VS Code | CI/CD Version francaise Why MUAD'DIB? npm and PyPI supply-chain attacks are exploding. Shai-Hulud compromised 25K+ repos in 2025. Existing tools detect threats but don't help you respond. MUAD'DIB combines 22 parallel scanners 277 detection rules, a...
[SECURITY] Fedora 43 Update: moby-engine-29.6.2-1.fc43
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...
[SECURITY] Fedora 43 Update: webkitgtk-2.52.5-1.fc43
WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...
[SECURITY] Fedora 44 Update: moby-engine-29.6.2-1.fc44
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...
Fedora 44 : moby-engine (2026-70a4eeeab8)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-70a4eeeab8 advisory. - Update to release v29.6.2 - Resolves: rhbz2496437 - Upstream security fixes - - GHSA-hw3h-2gp9-cxpv - - GHSA-qx3x-mv6r-52p6 - - GHSA-32pv-7hq5-qhwq - -...
Fedora 43 : moby-engine (2026-64ca3441c3)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-64ca3441c3 advisory. - Update to release v29.6.2 - Resolves: rhbz2496437 - Upstream security fixes - - GHSA-hw3h-2gp9-cxpv - - GHSA-qx3x-mv6r-52p6 - - GHSA-32pv-7hq5-qhwq - -...
CVE-2026-64303
In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When dmaengineprepslavesg fails for the TX channel, the error path terminates the TX DMA channel but leaves the RX channel running. Since the RX channel was...