ROS-20260810-73-0023

The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-69875

Name of the Vulnerable Software and Affected Versions Pega Platform versions 8.5.0 through 25.1.2 Description Improper validation of cryptographic signatures may allow an attacker to bypass security controls. Recommendations At the moment, there is no information about a newer version that contai...

ROS-20260810-73-0024

The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260810-73-0004

The vulnerability of the JAXP component in the Oracle Java SE software platform and the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to...

CVE-2026-48048: Exposure of Private Personal Information to an Unauthorized Actor

XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the LiveTableResults, it is still possible to...

CVE-2026-10754: Improper Verification of Cryptographic Signature

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls...

ROS-20260810-73-0022

The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

libarchive security update

3.7.7-10 - Related: CVE-2026-14164 3.7.7-9 - Resolves: CVE-2026-14164...

Live-Forensicator v4.2.0

🛡️ Forensicator 🛡️ Cross-platform Incident Response & Live Forensics Toolkit Windows PowerShell | Linux Bash | macOS Shell Built for fast, structured, and actionable forensic investigations. 🤔 About Forensicator is a cross-platform incident response and live forensics toolkit. It is designed to...

yeti v2.6.1

Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...

AutoSRC-AISkill

AutoSRC-AISkill A fully automated SRC vulnerability discover...

CVE-2026-19190

creationtimestamp| type| source ---|---|--- 2026-08-09 09:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msn7wj4u3225...

GHSA-9RJ7-RF2P-W77R vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

GHSA-WVPP-8HX9-P66J vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

GHSA-2V37-7H3G-55P8 vulnerabilities

Vulnerabilities for packages: pelias-api, unleash-fips, gitlab-rails-ce, arangodb, renovate, vite, jitsucom-jitsu, langfuse, dotstatsuite-supercore, json-server, langfuse-fips, jupyter-base-notebook, keep, gitlab-rails-ce-fips, vitess, authentik, nextcloud-server, tensorflow-gpu-jupyter, homepage...

RHBA-2025:21221 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.17.44 packages update

Bulletin has no description...

CVE-2026-8798

In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...

Malicious code in sme-rko-finance-front-operations-notifications-impl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3461050b5714edca455c0fd78e979cd5efbdfeeb375016aeb4fe4523f47682 On require, index.js loads adapter.js which selects a platform-specific payload linux x64/arm64, darwin, win32 and fetches it from...

MAL-2026-13640 Malicious code in sme-rko-finance-front-operations-notifications-impl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3461050b5714edca455c0fd78e979cd5efbdfeeb375016aeb4fe4523f47682 On require, index.js loads adapter.js which selects a platform-specific payload linux x64/arm64, darwin, win32 and fetches it from...

MAL-2026-13649 Malicious code in sme-rko-finance-front-operations-tax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede42a446ab3685943424af5a5411fb93bf5961c83ccf6ce02b35b8d835c60aa On require, index.js loads platform.js and lib/telemetry.js, which download a platform-specific binary from obfuscated Cloudflare Workers hosts...