CVE-2026-59989

Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and earlier, resolveFilter in phalcon/Mvc/View/Engine/Volt/Compiler.zep builds the join filter by inserting the raw separator and array token values into generated PHP without passing them through expression. An attacker who can...

HaE HaEFile-1.0.3

Empower ethical hacker for efficient operations. Network version: overspace-labs/HaENet File version: overspace-labs/HaEFile README Version: English | 简体中文 Project Introduction HaE is a framework-style project in the field of cybersecurity data security , adopting a Lego brick-style modular desig...

EUVD-2026-64140

Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and earlier, resolveFilter in phalcon/Mvc/View/Engine/Volt/Compiler.zep builds the join filter by inserting the raw separator and array token values into generated PHP without passing them through expression. An attacker who can...

CVE-2026-59989 Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE)

Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and earlier, resolveFilter in phalcon/Mvc/View/Engine/Volt/Compiler.zep builds the join filter by inserting the raw separator and array token values into generated PHP without passing them through expression. An attacker who can...

emp3r0r v4.11.0

emp3r0r Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents. What is emp3r0r? emp3r0r is an advanced, zero-trust post-exploitation framework and command & control C2 system designed for Linux and Windows target environments. Built from the...

CVE-2026-62674 Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/sessionid/agent checks LEVELEDIT permission for a session but does not reject a bound shared or template agent whose agent.sessionid is None. An authenticated user with ed...

CLSA-2026-1787317970 TuxCare security update for org.springframework (5 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.31-tuxcare.11...

CLSA-2026-1787317539 TuxCare security update for org.springframework (6 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 6 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.6...

CLSA-2026-1787313469 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 7 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.3...

CLSA-2026-1787313161 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.30-tuxcare.7...

CVE-2026-74463

A flaw was found in the Linux kernel's i2c: jz4780 driver. A severe deadlock can occur between the Common Clock Framework CCF and the I2C adapter lock. This happens when an I2C-controlled clock generator client is registered or modified, and a concurrent I2C transfer attempts to acquire a lock...

CLSA-2026-1787311912 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 2 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.7...

CLSA-2026-1787311640 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.24-tuxcare.6...

go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For

...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the setregn function. An attacker can cause a four-byte heap buffer overflow by supplying crafted SH2A FPU bytecode processed through csdisasmiter or csdisasm with specific architecture and mode options,...

SUSE CVE-2026-68231

In the Linux kernel, the following vulnerability has been resolved: media: airspy: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...

PT-2026-79456

Name of the Vulnerable Software and Affected Versions Phalcon versions prior to 5.16.0 Description The resolveFilter function in phalcon/Mvc/View/Engine/Volt/Compiler.zep constructs the join filter by inserting raw separator and array token values into generated PHP without using the expression...

TraceGrant: A Contract-Governed Security Framework for the Task-Effect Lifecycle of Networked LLM Agents

Networked large language model LLM agents retrieve information from email, cloud storage, calendars, transaction platforms, and Web services to complete multistep tasks that produce persistent external effects. The same content needed for legitimate execution may also contain indirect prompt...

PT-2026-80619

These are all security issues fixed in the python313-djangorestframework-3.18.0-1.1 package on the GA media of openSUSE Tumbleweed...

DEBIAN-CVE-2026-55893

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...