Sandbox bypass vulnerability in script-security

script-security provides a sandbox feature that allows running user-provided scripts safely by intercepting and checking potentially unsafe operations. script-security 1415.v9af9b3ac253d and earlier does not reject the @GroovyASTTransformationClass annotation, which a script can use to link an...

Sandbox bypass vulnerability in script-security

script-security provides a sandbox feature that allows running user-provided scripts safely by intercepting and checking potentially unsafe operations. Groovy's @Builder annotation generates builder code at compile time using the strategy class named by its builderStrategy member, which can be on...

Sandbox bypass vulnerability in script-security

script-security provides a sandbox feature that allows running user-provided scripts safely by intercepting and checking potentially unsafe operations. Groovy allows an existing class to be extended at runtime with additional methods. script-security 1415.v9af9b3ac253d and earlier does not check...

SUSE CVE-2026-92061

Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

SUSE CVE-2026-92078

Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

django-DefectDojo v3.3.100

DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...

CLSA-2026-1789513129 TuxCare security update for io.netty (4 CVEs)

TuxCare rebuilt 38 io.netty packages to address 4 CVEs. Fixed in 4.1.43.Final-tuxcare.1...

GHSA-2H44-8472-FRJJ

creationtimestamp| type| source ---|---|--- 2026-09-15 22:54:25+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mvlprda2mw2w...

CVE-2026-61559

creationtimestamp| type| source ---|---|--- 2026-09-15 22:35:01+00:00| published-proof-of-concept| https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-2h44-8472-frjj 2026-09-15 22:54:24+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mvlprcfb7g2w 2026-09-16...

CVE-2026-91728

An integer overflow flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=556715288...

CLSA-2026-1789510477 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.30-tuxcare.11...

CVE-2026-92000

creationtimestamp| type| source ---|---|--- 2026-09-15 22:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlmqp54zu2m...

CVE-2026-76853

Netcore NR268 firmware version 1.7.121109 is affected by a security check bypass in the parame_put_file.cgi restore archive prefix validation. The root cause is a flawed prefix check in put_parame_file_cgi.c , which allows an attacker with low privileges to bypass restricted restore archive handl...

CVE-2026-76853 Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi

Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parameputfile.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in putparamefilecgi.c to bypass restricted restore archive handling...

CVE-2026-76853 Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi

Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parameputfile.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in putparamefilecgi.c to bypass restricted restore archive handling...

sippts v4.2.1

What is Sippts? Sippts is a set of tools to audit VoIP servers and devices using the SIP protocol. Sippts is programmed in Python and it allows us to check the security of a VoIP server using the SIP protocol. Is it free? Yes. You can freely use, modify and distribute it. If you modify it, please...

CVE-2026-71133

creationtimestamp| type| source ---|---|--- 2026-09-15 21:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvllmfzmvr2f 2026-09-15 22:08:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvln7jbsog22 2026-09-16 16:00:45+00:00| seen|...

Important: Red Hat Security Advisory: RHACS 4.11.4 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Important: Red Hat Security Advisory: RHACS 4.10.8 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Important: Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

An update for .NET 10.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...