CVE-2026-19557

A flaw was found in the TabStrip component of Chromium. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to escape the browser's sandbox, leading to furthe...

CVE-2026-19144 vulnerabilities

Vulnerabilities for packages: chromium...

firefox: thunderbird: Site isolation issue in the Networking: HTTP component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking: HTTP component...

CVE-2026-19173 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-19169 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-8G9R-MP6V-7M38 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MH4H-C4W6-M987 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XC4C-849C-886M vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RHP6-Q4J8-V7V5 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-19172 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2PJC-WR33-2RRG vulnerabilities

Vulnerabilities for packages: chromium...

SUSE CVE-2026-6368

Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

CVE-2026-19140 Use after free in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2026-71126

Name of the Vulnerable Software and Affected Versions Apache Airflow version 3.3.0 Description Insecure deserialization in the Apache Airflow Scheduler allows for arbitrary module import, which can lead to remote code execution. Deserialization is the process of converting a data format back into...

CVE-2026-64951: Divide By Zero

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile function...

WordPress CAPTCHA: A vulnerability in 4WP that allows bypassing verification

WordPress CAPTCHA 4WP is a paid verification plugin designed specifically for WordPress. It integrates third-party services such as Google reCAPTCHA, hCaptcha, and Cloudflare Turnstile to prevent robot attacks, spam comments, fake registrations, and automated login attempts. WordPress CAPTCHA 4WP...

Linux Distros Unpatched Vulnerability : CVE-2026-72718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the goose review command runs the system git executable to gather the diff for...

CVE-2026-73298: Authorization Bypass Through User-Controlled Key

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the...

Linux Distros Unpatched Vulnerability : CVE-2026-73067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::readsquisheddawg i...

Black Hat Europe 2023 Conference Slides

Black Hat Europe 2023 conference slides for topics Unmasking APTs: An Automated Approach for Real-World Threat Attribution, How I Learned to Stop Worrying and Build a Modern Detection & Response Program, The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread...