145189 matches found
Security Bulletin: Multiple security vulnerabilites identified in open source libraries shipped with IBM Guardium Cryptography Manager (GCM)
Summary The vulnerabilities were found in dependent open source libraries used within IBM Guardium Cryptography Manager code base. These issues have been addressed by updating the versions of affected libraries. Vulnerability Details CVEID:CVE-2026-47838 DESCRIPTION: SubjectDnX509PrincipalExtract...
Security Bulletin: Security vulnerabilities have been identified in Golang version shipped with IBM Guardium Cryptography Manager (GCM)
Summary Security vulnerabilities identified in Golang version shipped with IBM Guardium Cryptography Manager GCM have been addressed. Vulnerability Details CVEID:CVE-2026-32283 DESCRIPTION: If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the...
Security Bulletin: Multiple vulnerabbilities exists in the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Configuration Manager.
Summary IBM Tivoli Network Configuration Manager is affected by multiple security vulnerabilities in IBM SDK, Java Technology Edition. This bulletin addresses the IBM SDK, Java Technology Edition Quarterly Critical Patch Update CPU for Jul 2026, which includes Oracle July 2026 CPU plus four...
Security Bulletin: Multiple security vulnerabilities identified in Spring Framework version shipped with IBM Guardium Cryptography Manager (GCM)
Summary Security vulnerabilities identified in Spring Framework shipped with IBM Guardium Cryptography Manager GCM have been addressed Vulnerability Details CVEID:CVE-2026-41841 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving static...
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
The Australian Federal Police AFP has charged two Western Australian men with a combined total of 14 offences over their alleged role in TeamPCP , the cybercrime group behind the March 2026 compromise of the open-source security scanners Trivy and Checkmarx KICS and the AI gateway LiteLLM. Louis...
Security update for openssl, openssl-3
This update for openssl, openssl-3 fixes the following issues: OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support Security issues fixed: CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling bsc1266347 CVE-2026-34182...
Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools
Individuals and organizations in Cambodia have emerged as the target of a new campaign that delivers an open-source remote access trojan RAT called Spark RAT. "The samples employ diverse lure themes, suggesting an effort to appeal to a broad range of potential victims. These include government...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in click (CVE-2026-7246)
Summary A command injection vulnerability in the click CLI creation library CVE-2026-7246 used by IBM InfoSphere Optim Archive Viewer on Windows and Linux platforms has been addressed by upgrading the component to version 8.3.3. Vulnerability Details CVEID:CVE-2026-7246 DESCRIPTION: This CVE reco...
keyhog v0.5.86
Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...
Security Bulletin: Security vulnerability is addressed in IBM Daeja ViewONE as part of iFix release in August 2026
Summary Vulnerability reported in a third party library used by IBM Daeja ViewONE to handle certain PDF documents – specifically those that are encrypted or digitally signed. Vulnerability Details CVEID:CVE-2026-59645 DESCRIPTION: In Bouncy Castle for Java before 1.85, OER parser recurses without...
CVE-2026-80565
A flaw was found in the Linux kernel's crypto: qce component. An error in the devmqceregisteralgs function's error handling path causes the system to repeatedly attempt to unregister algorithms incorrectly when a registration fails. This improper handling of resources could lead to system...
JavaScript obfuscation: From party trick to phishing kit
We open a JavaScript artifact hoping for code, and instead get string arrays, strangely named functions, encoded URLs, runtime decoders, and eval statements. That is the point where "reading the script" stops being enough. Obfuscated JavaScript is still code, but it is code with the useful contex...
Exploit for CVE-2026-55040
JWT Token Bypass Exploit for Microsoft SharePoint CVE-2026-5504...
Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is affected by multiple vulnerabilities (CVE-2026-14981, CVE-2026-15064, CVE-2026-15328, CVE-2026-15325)
Summary There are multiple vulnerabilities in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager. Vulnerability Details CVEID:CVE-2026-14981 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition used by IBM Tivoli System Automation Application Manager. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check ...
Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is vulnerable to stored cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)
Summary IBM WebSphere Application Server is used by IBM Tivoli System Automation Application Manager and is vulnerable to cross-site scripting and deserialization vulnerabilities. Required fixes for affected WebSphere Application Server has been published in the security bulletin links below...
Exploit for CVE-2026-18963
CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detecto...
Security Bulletin: IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc. (CVE-2026-10535)
Summary IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc. Vulnerability Details CVEID:CVE-2026-10535 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc. CWE:CWE-121: Stack-based Buffer Overflow CVSS...
SkillSpector v2.10.0
SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...