Moodle 3.8-3.10.3 - Reflected XSS & Open Redirect

Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 contain a reflected XSS and open redirect caused by insufficient sanitization of the redirect URI in the LTI authorization endpoint, letting attackers execute scripts or redirect users maliciously, exploit requires crafted URL with...

CVE-2026-17084

CVE-2026-17084 affects Python's stringprep module, which incorrectly used the latest Unicode codepoint attributes instead of the mandated Unicode 3.2.0 when processing RFC 3454 tables B.2 and B.3. This causes mismatches in domain name handling via the IDNA 2003 codec and the in_table_b2() functio...

[SECURITY] Fedora 43 Update: samba-4.23.10-1.fc43

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

[SECURITY] Fedora 44 Update: samba-4.24.5-1.fc44

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

Aembit Joins Snowflake to Tackle AI’s Next Security Frontier: Trusted Agent Interoperability

Silver Spring, MD, USA, 28th July 2026, CyberNewswire...

EUVD-2026-46760

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Interoperability Security. The supported version that is affected is 9.2.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via JDENET to compromise JD Edwards...

CVE-2026-60346

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Interoperability Security. The supported version that is affected is 9.2.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via JDENET to compromise JD Edwards...

PT-2026-62440

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2.26.3 Description An issue exists in the Interoperability Security component of the product. An unauthenticated attacker with network access via JDENET can compromise the system, potentially...

The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?

Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and NATO, new investment, evolving defense strategies, and accelerated acquisition pathways are transforming how capability is delivered, rewarding programs that can move...

[SECURITY] Fedora 43 Update: samba-4.23.8-1.fc43

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

[SECURITY] Fedora 44 Update: samba-4.24.3-1.fc44

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

All implementations of FHIRPathEngine accept arbitrary FHIRPath expressions and evaluate them without input validation. The FHIRPath functions matches, matchesFull, and replaceMatches pass user-controlled regular expressions directly to Java's Pattern.compile and String.replaceAll without...

CVE-2023-42343

A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type...

From Specification to Deployment: Empirical Evidence from a W3C VC + DID Trust Infrastructure for Autonomous Agents

Autonomous AI agents now transact at production scale -- 69,000 bots executing 165 million transactions across 50 million USDC in cumulative volume on a single marketplace -- without any shared trust layer between participants. Regulatory frameworks Singapore IMDA, NIST CAISI, EU AI Act and major...

[SECURITY] Fedora 42 Update: asterisk-18.26.4-1.fc42

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

CVE-2026-34052

LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send...

CVE-2026-34052 LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)

LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send...

EUVD-2026-18893

LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage Denial of Service...

PT-2026-30253

Name of the Vulnerable Software and Affected Versions LTI JupyterHub Authenticator versions prior to 1.6.3 Description The LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, allowing an attacker with a valid...

LTI JupyterHub Authenticator 安全漏洞

LTI JupyterHub Authenticator is an open-source LTI-based authentication service for JupyterHub. Versions of LTI JupyterHub Authenticator prior to 1.6.3 contained a security vulnerability. This vulnerability stemmed from the unlimited growth of OAuth random numbers, which could lead to...