The vulnerability of the ReadSTEGANOImage() function in the ImageMagick console graphics editor’s coders/stegano.c file allows a hacker to induce a service failure.

The vulnerability of the ReadSTEGANOImage function in the ImageMagick console graphics editor’s coders/stegano.c file is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the WriteASHLARImage() function in the ImageMagick console graphics editor’s coders/ashlar.c file allows a hacker to cause a service failure.

The vulnerability of the WriteASHLARImage function in the ImageMagick console graphics editor’s coders/ashlar.c file is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260708-73-0068

The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260708-73-0047

The vulnerability in ImageMagick is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dsa_switch_parse() function in the net/dsa/dsa.c module allows a hacker to cause a service failure in systems with a distributed kernel architecture of the Linux operating system.

The vulnerability of the dsaswitchparse function in the net/dsa/dsa.c module relates to the improper release of resources in support for Linux’s distributed kernel architecture. Exploiting this vulnerability could allow an attacker to cause service failures...

PT-2026-56424

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.6 Dell PowerProtect Data Domain versions 8.6.1.0 through 8.6.1.10 Dell PowerProtect Data Domain versions 8.3.1.0 through 8.3.1.30 Dell PowerProtect Data Domain versions 7.13.1.0 through...

The vulnerability of the stratix10_svc_probe() function in the drivers/firmware/stratix10-svc.c file of the Linux kernel firmware driver allows a malicious actor to cause a service failure remotely.

The vulnerability of the stratix10svcprobe function in the drivers/firmware/stratix10-svc.c file of the Linux kernel firmware driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the msl.c file in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the msl.c file in the console-based image editing tool ImageMagick is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Why Unity Remains the Most Popular Engine for Mobile Games

Learn why Unity is still a trusted engine for mobile games, from faster prototyping and Android and iOS support to tools that help studios scale after releases...

CVE-2026-54607 FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard)

FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta4, the HTTP-tool OpenAPI schema importer validates only the top-level URL before passing it to SwaggerParser.bundle, whose remote reference resolver fetches $ref URLs without FastGPT's internal-address guard and returns...

CVE-2026-55490 OpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service

OpenWrt is a Linux operating system targeting embedded devices. Before v25.12.5, an integer underflow in handlesenda of the Emergency Access Daemon allows any unauthenticated attacker on the local network to crash the daemon by sending a single crafted UDP packet. The message length underflows...

[SECURITY] [DSA 6382-1] postfix security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6382-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 07, 2026 https://www.debian.org/security/faq -...

kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A race condition exists in the SCTPSENDALL path where a cached list entry is not properly revalidated after the socket lock is temporarily released. This allows a local attacker or a remote attacker v...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-55435

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, AI Bridge proxy endpoints authenticate via Server.IsAuthorized in coderd/aibridgedserver, which validates key format, expiry, secret...

CVE-2026-55435 Suspended Coder users retain access to AI Bridge LLM proxy endpoints

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, AI Bridge proxy endpoints authenticate via Server.IsAuthorized in coderd/aibridgedserver, which validates key format, expiry, secret...

GO-2026-5665 GoBGP has an Improper Resource Shutdown or Release in github.com/osrg/gobgp

GoBGP has an Improper Resource Shutdown or Release in github.com/osrg/gobgp...

PYSEC-2026-1886 SageMaker Python SDK has Insecure TLS Configuration

Summary SageMaker Python SDK is an open source library for training and deploying machine learning models on Amazon SageMaker. An issue where SSL certificate verification was globally disabled in the Triton Python backend has been found. Impact Arbitrary Code Execution: Disabling SSL verification...

Use of Cache Containing Sensitive Information

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information in the UpdateCacheMiddleware and cachepage process when responses that vary on...

PyMdown Extensions has a ReDOS bug in its Figure Capture extension

ImpactThis issue describes a ReDOS bug found within the figure caption extension pymdownx.blocks.caption .In systems that take unchecked user content, this could cause long hangs when processing the data if a malicious payload was crafted. PatchesThis issue is patched in Release 10.16.1...