164990 matches found
Exploit for CVE-2026-21589
CVE-2026-21589 — Atlassian pre-auth arbitrary file read Pytho...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 inpu...
SUSE-SU-2026:4585-1 Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8...
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.
...
Vulnerabilities present in Cisco NX-OS Software
Cisco has addressed several vulnerabilities in the Cisco NX-OS Software. These vulnerabilities concern various components of the Cisco NX-OS Software. - A vulnerability in the Python interpreter allows a malicious local attacker with low privileges to escape the Python sandbox and execute arbitra...
Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance
Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2025-0938 DESCRIPTION: The Python standard library functions urllib.parse.urlsplit and urlparse accepted domain names that included square brackets which isn't valid...
Security Bulletin: IBM Jazz for Service Management is vulnerable to improper input validation in Apache ActiveMQ TopicRegion
Summary IBM Jazz for Service Management is vulnerable to improper input validation in Apache ActiveMQ TopicRegion CVE-2026-74761 Vulnerability Details CVEID:CVE-2026-74761 DESCRIPTION: Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on...
K000163592: Samba vulnerability CVE-2026-2340
Security Advisory Description A flaw was found in Samba’s vfsworm module. The module is intended to provide write-once, read-many WORM protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user...
SUSE-SU-2026:24205-1 Security update for libheif
This update for libheif fixes the following issues: - CVE-2026-84449: hOpRGB2432toYCbCr Memory Access Error / SEGV bsc1281829. - AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions bsc1281953. - Caller-configured security limits not enforced for MINI-box parsing...
OPENSUSE-SU-2026:22052-1 Security update for libheif
This update for libheif fixes the following issues: - CVE-2026-84449: hOpRGB2432toYCbCr Memory Access Error / SEGV bsc1281829. - AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions bsc1281953. - Caller-configured security limits not enforced for MINI-box parsing...
MAL-2026-17804 Malicious code in css-nesting-transform (npm)
[email protected] was published to npm on 2026-10-07 01:32 UTC by user brahimhamidi the same account that published [email protected] on 2026-10-06. It is described as a CSS polyfill but contains none: index.js is an empty module byte-identical to the index.js of...
Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition
Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate Developer Edition version 2.18.0 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a...
Exploit for CVE-2026-105192
CVE-2026-105192 LMCache Unauthenticated RCE via Pickle Dese...
Malicious code in css-flow-render-shim (npm)
[email protected] was published to npm on 2026-10-06 22:49 UTC by user brahimhamidi the account's only package. It is described as a CSS polyfill but contains none: index.js is an empty module byte-identical to the index.js of [email protected] and payload.min.css is 15 bytes...
MAL-2026-17655 Malicious code in css-flow-render-shim (npm)
[email protected] was published to npm on 2026-10-06 22:49 UTC by user brahimhamidi the account's only package. It is described as a CSS polyfill but contains none: index.js is an empty module byte-identical to the index.js of [email protected] and payload.min.css is 15 bytes...
Exploit for Improper Verification of Cryptographic Signature in Wso2 Api_Control_Plane
CVE-2026-5430 — WSO2 API Manager JWT Algorithm Bypass Det...
PT-2026-108641
Summary createVerifier in fast-jwt ≤ 6.3.0 skips signature verification entirely when the key option is a falsy synchronous value '' or null and the algorithms option is set to a non-empty allowlist. An attacker who can present a JWT to the application — regardless of algorithm — can forge...
PT-2026-108676
Summary Several remote-content download paths in Pydantic AI buffered the entire HTTP response body into memory before enforcing any size limit. An application that exposes the local web-fetch tool web fetch tool, or the WebFetch capability's local fallback to untrusted prompts can be driven to...
Secure Quantum Handshakes: Quantum Network Verification Via Simon's Algorithm
Quantum networking represents the future of secure communication, enabling fundamentally new capabilities through quantum information exchange. However, these networks require secure, high-fidelity quantum communication channels, and they require every participating node to be a genuine quantum...
PT-2026-108678
Summary A crafted SVG file 1009 bytes crashes the PHP process when sanitized by enshrined/svg-sanitize any version through 0.22.x. The sanitizer's cleanAttributesOnWhitelist method calls DOMElement::removeAttribute twice on the same attribute name — first removing the explicit attribute, then...