IAGA-Sentinel v2.1.0

IAGA Sentinel The EU AI Act conformity evidence layer for AI agents. Cryptographically signed, replay-verifiable evidence of every action an agent routes through it, structured to support AI Act Article 12 record-keeping and Annex IV documentation. Documentation · Setup in one prompt · Quickstart...

PT-2026-85039

Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to redirect blob downloads to arbitrary hosts. An attacker can control a registry, serve a malicious tensor-layer manifest, and cause the server to issue GET requests to internal...

CVE-2026-85180: Server-Side Request Forgery (SSRF)

Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to redirect blob downloads to arbitrary hosts. An attacker can control a registry, serve a malicious tensor-layer manifest, and cause the server to issue GET requests to internal...

Ivanti Connect Secure - Stack-based Buffer Overflow

Ivanti Connect Secure 22.7R2.5, Ivanti Policy Secure 22.7R1.2, and Ivanti Neurons for ZTA gateways 22.7R2.3 contain a stack-based buffer overflow in the clientCapabilities parameter handling. This vulnerability allows remote unauthenticated attackers to execute arbitrary code through IF-T TLS...

Variational Probabilistic Quantization for Secret Key Generation

Secret key generation from correlated observations at Alice and Bob, in the presence of an eavesdropper Eve, underpins physical-layer security. Classical pipelines quantize by hand, amplify privacy afterwards, and optimize no objective tied to a key rate. We propose Variational Probabilistic...

CVE-2026-53611: Improper Neutralization of Special Elements used in an OS Command

Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...

SecDT: A Profile-Based Security Layer for TRDP Communications

The Train Real-time Data Protocol TRDP is widely used on rolling stock but it provides limited native support for cryptographic protection. Furthermore, the multicast traffic profile used in TRDP Process Data to exchange critical information between onboard subsystems makes the introduction of...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a...

The vulnerability of the DarkMode component in Google Chrome and Microsoft Edge web browsers allows a hacker to compromise data integrity.

The vulnerability of the DarkMode component in Google Chrome and Microsoft Edge relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

cloudflared v2026.8.3

Cloudflare Tunnel client Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin e.g. a webserver. Cloudflare attracts client requests and sends them to...

CVE-2026-82746 Ash.update_many/4 atomic path skips resource policy authorization, allowing updates to forbidden records

Missing Authorization vulnerability in ash-project ash allows an actor to update records forbidden by resource policies through the atomic path of Ash.updatemany/4. Ash.updatemany/4 runs as a single atomic statement a data-layer updatemany, for example a SQL MERGE whenever an atomic strategy is...

CVE-2026-82745 ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness

Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS or Mnesia data layer is used, because neither enforced primary-key uniqueness on insert. Unlike a SQL data layer, whose unique primary-key constraint rejects a duplicate, the ET...

CVE-2026-82745 ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness

Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS or Mnesia data layer is used, because neither enforced primary-key uniqueness on insert. Unlike a SQL data layer, whose unique primary-key constraint rejects a duplicate, the ET...

CVE-2026-82745: Improper Access Control

Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS or Mnesia data layer is used, because neither enforced primary-key uniqueness on insert. Unlike a SQL data layer, whose unique primary-key constraint rejects a duplicate, the ET...

From Silicon to Boot Code: Extending Automated Program Repair to Firmware-Layer Security Workarounds

Automated program repair APR research has been constrained to design time. Current techniques localize and fix bugs in RTL or HLS designs before a chip reaches production. Once a hardware vulnerability surfaces post-silicon, the patch must be manually generated: existing automation addresses patc...

openSUSE 16 Security Update : 389-ds (openSUSE-SU-2026:21691-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21691-1 advisory. Update to version 3.0.6git382.7a51ea5f5. Security issues fixed: - CVE-2026-11610: heap buffer overflow in the SASL I/O layer via a crafted...

CVE-2026-50199 Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refresh

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/updateexchange.php loads the first Fixer/API Layer credential globally instead of loading the credential for the authenticated user. As a result, a normal authenticated user without...

EUVD-2026-68769

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/updateexchange.php loads the first Fixer/API Layer credential globally instead of loading the credential for the authenticated user. As a result, a normal authenticated user without...

CVE-2026-50199

Wallos , an open-source self-hostable personal subscription tracker, is affected in versions prior to 4.9.1 . The vulnerable component is endpoints/currency/update_exchange.php, which loads the first Fixer/API Layer credential globally rather than the credential belonging to the authenticated use...

OPENSUSE-SU-2026:21691-1 Security update for 389-ds

This update for 389-ds fixes the following issues: Update to version 3.0.6git382.7a51ea5f5. Security issues fixed: - CVE-2026-11610: heap buffer overflow in the SASL I/O layer via a crafted oversized LDAP UNBIND packet bsc1270695. - CVE-2026-11611: unbounded memory growth allowed by the Content...