GHSA-27GV-RFVV-22MV RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields

Summary An information disclosure vulnerability exists in the AMQP client implementation's authentication handling configuration. Following a successful connection handshake, the Connection.Config.SASL field stores the Authentication implementation state used to establish the session. For standar...

CVE-2026-92070

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Networking component...

CVE-2026-92044

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Networking: HTTP component...

EUVD-2026-80790

Zope AccessControl vulnerable to information disclosure through Python string format and formatmap functions...

USN-8780-1 libsoup2.4, libsoup3 vulnerabilities

It was discovered that libsoup incorrectly handled certain URLs when using an HTTP proxy. A remote attacker could possibly use this issue to inject arbitrary HTTP headers. CVE-2026-1467 It was discovered that libsoup did not remove proxy authentication credentials when following HTTP redirects. A...

CVE-2026-75523

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0, the Steeltoe.Management.Endpoint /actuator/httpexchanges endpoint passes recorded request URIs through MaskedUri, which masks URI user information but does...

CVE-2026-69197

Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and Public Access checks to the directly requested node but not to referenced nodes serialized through Content Picker or Multi-Node Tree Picker properties, including pickers nested in Block...

CVE-2026-93120 usb: gadget: configfs: fix out-of-bounds read of qw_sign

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: fix out-of-bounds read of qwsign osdescqwsignshow passes OSSTRINGQWSIGNLEN as the input length to utf16stoutf8s, but that argument counts UTF-16 code units while OSSTRINGQWSIGNLEN 14 is the byte size of...

EUVD-2026-82138

In the Linux kernel, the following vulnerability has been resolved: bpf, riscv: Fix extable handling for arena loadacquire emitatomicldst returns 1 to have buildbody skip the zext after a sub-word loadacquire. The caller does "ret = ret ?: addexceptionhandler...", which skips addexceptionhandler ...

tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.

A flaw was found in Apache Tomcat. During WebSocket authentication, the HTTP Authentication Header can be exposed to unexpected hosts. This vulnerability leads to information disclosure, potentially allowing an attacker to gain access to sensitive authentication credentials...

CVE-2026-90307

CVE-2026-90307 is a heap information disclosure vulnerability in the Linux kernel's RDMA/srp (SCSI RDMA Protocol) subsystem. The root cause is that srp_process_cred_req() and srp_process_aer_req() read fixed-size fields from the receive buffer without verifying that the data was actually present....

CVE-2026-90307 RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

EUVD-2026-81865

In the Linux kernel, the following vulnerability has been resolved: perf: armpmuv3: Zero initialize hwid branch stack field PERFSAMPLEBRANCHHWINDEX is supported by BRBE so hwid is passed to userspace, but it's never set by the BRBE driver. Zero initialize it as it should be according to the docs:...

CVE-2026-90094 arm64: process: Fix context switching MTE store-only tag check

In the Linux kernel, the following vulnerability has been resolved: arm64: process: Fix context switching MTE store-only tag check SCTLREL1.TCSO0 is set when user opt-in for MTE store-only tag check mode. However, it is not part of SCTLRUSERMASK which imply that on context switch we never clear...

CVE-2025-55183

CVE-2025-55183 Сканер уязвимости раскрытия исходного кода React Server Functions. Что это? CVE-2025-55183: Server Actions в React 19.0.0-19.2.1 могут быть использованы для раскрытия полного исходного кода, включая жестко заданные секреты, ключи API и учетные данные баз данных. Ссылки:...

ios-nehelper-enum-apps-0day

nehelper: перечисление установленных приложений 0-day iOS 15.0 Я обновил этот код, чтобы избежать прямого использования Private API. Подробнее читайте в моём посте в блоге. Однако это означает, что теперь этот код привязан к версии iOS и, возможно, к модели устройства. Поэтому если он не работает...

ios-gamed-0day

Эксплойт gamed в iOS исправлено в 15.0.2 Обновление: Apple незаметно исправила эту уязвимость в iOS 15.0.2 без какого-либо публичного признания или указания авторства. Любое приложение, установленное из App Store, может получить доступ к следующим данным без какого-либо запроса пользователю: emai...

CVE-2026-69197 Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansion

Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and Public Access checks to the directly requested node but not to referenced nodes serialized through Content Picker or Multi-Node Tree Picker properties, including pickers nested in Block...

CVE-2026-69197

Umbraco CMS (ASP.NET) contains an authorization bypass in the Content Delivery API prior to 13.15.1, 17.5.3, and 18.0.2 . Member and Public Access checks are applied to the directly requested node but not to referenced nodes serialized through Content Picker or Multi-Node Tree Picker properties, ...

CVE-2026-75523 Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0, the Steeltoe.Management.Endpoint /actuator/httpexchanges endpoint passes recorded request URIs through MaskedUri, which masks URI user information but does...