androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

ssh3

!NOTE SSH3 is probably going to change its name. It is still the SSH Connection Protocol RFC4254 running on top of HTTP/3 Extended connect, but the required changes are heavy and too distant from the philosophy of popular SSH implementations to be considered for integration. The specification dra...

CVE-2026-106805

A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...

CVE-2026-106805: n/a: A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling

A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...

CVE-2026-106805

A resource exhaustion vulnerability exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. Specifically, when the SMF fails to receive a PFCP Session Establishment Response from the UPF , the system fails to properly release the allocated UE IP address resources . Consequent...

CVE-2026-106805

A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...

EUVD-2026-115346

A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...

Security Bulletin: IBM MQ Appliance is affected by a stack buffer overflow vulnerability (CVE-2026-12665)

Summary IBM MQ Appliance has addressed a stack buffer overflow vulnerability that could allow an unauthenticated attacker to execute arbitrary code when processing TLS certificates with malformed distinguished names during channel connection establishment. Vulnerability Details CVEID:CVE-2026-126...

CVE-2026-65219

A flaw in the BMC RAKP+ implementation on Supermicro hardware allows an attacker to send a request followed by a specially crafted RAKP message. This vulnerability enables the attacker to establish an RMCP+ session , which can then be used to execute commands . The root cause is identified as an ...

EUVD-2026-110080

A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment MICE service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-base...

CVE-2026-110475

The CreditNirvana Collections Platform is vulnerable to an improper authentication and authorization flaw within its platform login service. An unauthenticated remote attacker can manipulate authentication requests to access APIs without a valid session. Successful exploitation allows the attacke...

CVE-2026-110475 Improper Authentication Vulnerability in CreditNirvana Collections Platform

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a val...

PT-2026-123298

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a val...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.6. It stems from improper handling of response message consumption by the wireguard noise module after intermediate initialization; this results in a race condition that may lead to inconsistent handshake states or repeated session...

Cryptographically Secure Agent-To-Agent Communication in Multi-Agent Systems

Multi-agent systems MAS comprise AI agents that collaborate or compete to perform complex, distributed tasks. Their dynamic interactions create opportunities for threat actors to target and impersonate other agents, intercept messages, inject malicious prompts, and exfiltrate sensitive data while...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Avoid null pointer deref during path establishment. For RTRS path establishment, the RTRS client initiates and completes connection establishment. After establishing all its connections, information is exchanged...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvmet: A possible leak has been fixed when destroying a ctrl during qp establishment. In nvmetsqdestroy, we capture sq-ctrl early. If it is not NULL, we know that a ctrl was allocated during the admin connect request handling. We...

CVE-2026-75120

The OpenText™ (EnCase SAFE Agents) component, used by products including OpenText™ Endpoint Investigator , Endpoint Forensics & Response , Information Assurance , and Endpoint Security , contains a security vulnerability. This flaw allows unauthorized or unauthenticated activity to establish an u...

CVE-2026-75120 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents

The OpenText™ EnCase SAFE Agents component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activi...

CVE-2026-108103

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsedroppeddltrafficthreshold that allows remote unauthenticated attackers to read past IE buffers via short IEs. Attackers can send PFCP Session Establishment or Modification Requests to the UPF on UDP port 8805 wi...