Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen

This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.2.0 ESR Fixed: Various security fixes. MFSA 2026-85 bsc1278001: CVE-2026-75874: Sandbox escape in the...

SUSE-SU-2026:4156-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen

This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.2.0 ESR Fixed: Various security fixes. MFSA 2026-85 bsc1278001: CVE-2026-75874: Sandbox escape in the...

Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen

This update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: This update ships Firefox Extended Support Release 153.2.0 ESR Fixed: Various security fixes. MFSA 2026-85 bsc1278001: CVE-2026-75874: Sandbox escape in the Remote...

SUSE-SU-2026:4140-1 Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen

This update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: This update ships Firefox Extended Support Release 153.2.0 ESR Fixed: Various security fixes. MFSA 2026-85 bsc1278001: CVE-2026-75874: Sandbox escape in the Remote...

CVE-2026-88852

Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla 7.0.0, Snippets Pro extension for Joomla 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the...

CVE-2026-88852

CVE-2026-88852 is a privileged stored XSS in the Snippets Free (Joomla < 7.0.0) and Snippets Pro (Joomla

CVE-2026-88852 Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla 7.0.0, Snippets Pro extension for Joomla 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the...

CVE-2026-88852 Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla 7.0.0, Snippets Pro extension for Joomla 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the...

EUVD-2026-77213

Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla 7.0.0, Snippets Pro extension for Joomla 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the...

Exploit for CVE-2026-90782

CVE-2026-90782 — S2OPC Status-Clobbering NULL Dereference Sta...

crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

A flaw was found in the Golang crypto/internal/nistec package. Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Considering how this function is used, this leaka...

PT-2026-91249

Name of the Vulnerable Software and Affected Versions a2aproject a2a-python versions prior to 1.1.4 Description A server-side request forgery issue exists in the Push Notification Sender component. The problem occurs within the dispatch notification function located in the src/a2a/server/tasks/ba...

PT-2026-91120

Name of the Vulnerable Software and Affected Versions D-Link DWR-M921 version 1.1.52 Description A remote OS command injection issue exists in the /boafrm/formDiskCreateShare file. The flaw occurs within the system function when the folderpath variable is manipulated, allowing an attacker to...

PT-2026-91743

Name of the Vulnerable Software and Affected Versions Activiti versions prior to 7.1.0.M7 Description Failure to validate hash-brace deferred expressions in process variables allows attackers to bypass expression filtering. By injecting expressions starting with , an attacker can store these...

PT-2026-91106

Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla 7.0.0, Snippets Pro extension for Joomla 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the...

Unconditional Security of Discrete-Modulated CV-QKD from Infinite-Dimensional MEAT

Discrete-Modulated DM Continuous-Variable CV Quantum Key Distribution QKD is an experimentally attractive approach to quantum cryptography, offering high key rates over metropolitan-scale distances while relying on state-of-the-art telecom infrastructure. However, a fundamental gap has remained...

Medium: curl

Issue Overview: A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS or CURLOPTSTREAMDEPENDSE, subsequently invokes curleasyreset, and finally terminates the handle with curleasycleanup. During this final cleanup...

PT-2026-91137

Name of the Vulnerable Software and Affected Versions Parallels Desktop versions prior to 27.0.0 Description A local privilege escalation issue exists in Parallels Desktop for Mac where an unprivileged local user can execute code as root. The prl disp service daemon runs with root privileges and...

CVE-2026-84564: Use of Uninitialized Variable

An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result i...

PT-2026-91737

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.0.0 through 9.5.3 Description Stored Cross-Site Scripting XSS occurs because the Edit Alias dialog only applies the trim function to submitted values without performing proper input neutralization. An authenticated user...