Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September 2026.

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in September 2026. Vulnerability Details CVEID:CVE-2025-71329 DESCRIPTION: image-size through 2.0.2 contains a denial of...

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the...

TornadoRevC2

TornadoRevC2 A lightweight, modular post-exploitation framework for authorized security research, red-team operations, and penetration testing. TornadoRevC2 manages interactive reverse shell and bind shell sessions on Linux and Windows hosts through a unified operator console, across plain TCP,...

Exploit for Argument Injection in Thecodingmachine Gotenberg

CVE-2026-40281 Gotenberg --- 📖 Table of...

cdn-ip-scanner

CDN IP Scanner V2.0 高精度 • 极速 • AI 驱动 English • فارسی • 下载 • 捐赠 🇬🇧 English 什么是 CDN IP Scanner？ CDN IP Scanner 是一款功能强大的基于 Web 的工具，用于扫描并查找最快的 CDN（内容分发网络）IP 地址。它帮助用户从 Cloudflare 、Fastly 等 CDN 网络提供商中发现干净、低延迟的 IP。 该扫描器采用经过验证的 5 次尝试验证方法 ，通过 /cdn-cgi/trace 端点检查，确保只报告真正有响应的 IP。结合 AI...

cve-2026-61732-lab

CVE-2026-61732 — Decepticon ChatML role-boundary forgery lab A self-contained, disposable lab that reproduces GHSA-g5f9-3xfg-p9mf / CVE-2026-61732: Decepticon , an autonomous red-team agent, wrapped web-crawl output into LLM messages without neutralizing ChatML special-token literals. On a...

Security Bulletin: Multiple Vulnerabilities in IBM CloudPak System

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-29074 DESCRIPTION: SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1,...

SMTP is the key: BPFDoor and AVERAT hitting the network edge

Overview Rapid7 tracked a set of Linux samples that blend into the software and device conventions of the telecom environments they target. The set spans a newly observed BPFDoor variant, a BPF Rekoobe build seen against South Korean targets, a dropper, and six builds of a Linux implant we track ...

ResetNightmare-impacket

ResetNightmare — CVE-2026-27912 Linux / impacket tooling for CVE-2026-27912 "ResetNightmare". Resets a target Active Directory account's password by requesting a kadmin/changepw TGT for an NTENTERPRISE principal whose name is the target's sAMAccountName, using an account UPNUser on which we can...

CVE-2026-64638

CVE-2026-64638 登录页面上的反射型 XSS 导致 PHP 代码执行——WordPress Core 软件： WordPress Core ≤ 7.0.2（7.0.3 之前的所有版本） CVSS： 8.9（高危） CWE： CWE-79——网页生成期间输入未正确中和 所需认证： 无（预认证） 用户交互： 主动（管理员需点击 1 个链接） 影响： XSS → 账户接管 → 远程代码执行 1. 这是什么漏洞？ WordPress 是全球最流行的内容管理系统，占互联网上所有网站的 40% 以上。每个 WordPress 站点都有一个位于 /wp-login.php...

rewrite-cve-2026-22732

rewrite-cve-2026-22732 一个 OpenRewrite 配方，用于检测易受 CVE-2026-22732 影响的代码。这是一个 Spring Security 缺陷，通过三种响应方法之一设置 Content-Length 会绕过 Spring Security 的 OnCommittedResponseWrapper。由于包装器从未看到该头，onResponseCommitted 永远不会触发，延迟添加的安全头（X-Frame-Options、X-Content-Type-Options、Cache-Control 等）会被静默丢弃。 它检测什么...

kestrel

拥有 Falco 的内核级可见性，同时提供内核原生工具所不附带的实时界面。 快速开始 · 规范 · 视图 · 路线图 Kestrel 通过 eBPF 代理跟踪内核事件（进程执行、文件访问、网络连接），并将其流式传输到 SvelteKit Web 应用——该应用渲染实时活动流、进程树、主机概览，并提供基于规则的告警引擎。完整的产品/架构文档参见 SPEC.md，运维指南参见 AGENTS.md。 为什么存在 eBPF 生态系统以后端、CLI、Kubernetes Operator 为主要形态。Falco——CNCF 已毕业的业界标准——众所周知地不自带任何 UI...

DEBIAN-CVE-2026-18036

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

CVE-2026-18036

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

UBUNTU-CVE-2026-18036

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

QuantumLock

QuantumLock Specification Unbreakable, Quantum-Ready, Forever. HTML Mirror: https://roxanneardary.com/quantumlock-specification/ Vision QuantumLock is an open-source protocol specification designed to make Bitcoin more resilient against the development of quantum computing and other emerging...

CVE-2026-18036 NTRU leaks private key information by reducing secret values with a non-constant-time integer division

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

CVE-2026-18036

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

CVE-2026-18036 NTRU leaks private key information by reducing secret values with a non-constant-time integer division

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

CVE-2026-18036

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...