Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Security Bypass

Summary golang.org/x/crypto is used by IBM Storage Fusion Data Foundation, which could cause Security Bypass. CVE-2022-30636, CVE-2024-45337, CVE-2025-22869, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181. Vulnerability Details CVEID:CVE-2022-30636 DESCRIPTION: httpTokenCacheKey uses path.Base to...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Security Bypass.

Summary golang-jwt/jwt is used by IBM Storage Fusion Data Foundation, which could cause Security Bypass. CVE-2024-51744, CVE-2025-30204. Vulnerability Details CVEID:CVE-2024-51744 DESCRIPTION: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in...

CVE-2017-16995

CVE-2017-16995...

CVE-2021-3156

CVE-2021-3156...

CVE-2026-84110

Releasit COD Form & Upsells v1 contains a vulnerability in its OTP Validation component where server-side security is enforced only on the client side, allowing remote attackers to bypass one-time password validation without authentication or user interaction. The vulnerability results in a low i...

EUVD-2026-69214

A vulnerability was detected in Releasit Releasit COD Form & Upsells v1. This vulnerability affects unknown code of the component OTP Validation. The manipulation results in client-side enforcement of server-side security. The attack may be launched remotely. The exploit is now public and may be...

bordair-detector

Bordair Detector 一个针对 LLM 输入中提示注入和越狱尝试的两阶段检测器。正则表达式门控在不触碰模型的情况下处理大多数易判别的流量；任何模糊的输入都会落到以 ONNX 运行的量化 DeBERTa-v3 分类器上。同一引擎覆盖图像、文档和音频输入，因此无论注入通过哪个通道到达，都会被捕获。 它基于 Bordair Multimodal 数据集（超过 500,000 个标注样本）进行训练，并针对从真实对抗性尝试中收集的样本进行了测试，这些尝试来自一个实时游戏，人类玩家竞相击败该检测器。 模型权重：Hugging Face Hub 上的...

IIITA-IoT-Security-Research

IIIT Allahabad – Prácticas de Investigación en Seguridad IoT Resumen Este repositorio muestra el trabajo realizado durante mis Prácticas de Investigación en el Indian Institute of Information Technology, Allahabad IIIT Allahabad en el Laboratorio de Criptografía y Seguridad de Redes CNS. Durante...

QuantumLock

QuantumLock 坚不可摧，量子就绪，永恒。 QuantumLock 是一个开源、抗量子的比特币协议 ，旨在保护数字资产免受量子计算这一新兴威胁的影响。它融合了先进的密码学、隐私保护、可扩展性和弹性特性，确保比特币保持安全并面向未来。 目录 1. 概述 2. 功能特性 3. 安装 4. 使用 5. 贡献 6. 许可证 7. 署名 概述 量子计算对当前的密码学标准构成了切实的威胁。QuantumLock 通过引入抗量子签名、混合多重签名支持、模块化共识升级和隐私增强，确保后量子时代的比特币安全 。 它完全开源 ，旨在供全球开发者社区采纳、试验和贡献。 功能特性 核心抗量子能力...

SecureCivic

SecureCivic SecureCivic es una plataforma de verificación de identidad de código abierto construida por la ciudadanía, diseñada para permitir que la Administración del Seguro Social SSA adopte un sistema de verificación moderno y centrado en la privacidad. Elimina la dependencia de corredores de...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.36 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

cve-2026-21509-office_security_bypass_reproduction

CVE-2026-21509 — Microsoft Office 安全功能绕过 CVE-2026-21509 是一个 Microsoft Office 安全功能绕过漏洞 CVSS 7.8 ，被 APT28（俄罗斯黑客组织） 积极利用攻击乌克兰 安全决策中依赖不可信输入（CWE-807 ）——"破坏 kill bit" 允许通过恶意文档绕过受保护视图 和OLE 缓解措施 影响 Office 2016、2019、2021、2024、Microsoft 365 应用 2026年1月 发布紧急带外补丁 概述 CVE-2026-21509 是 Microsoft Office...

blackbox.ai.security.analysis

此存储库没有 README。...

CGA-9G5W-43CC-7RWX

Bulletin has no description...

DEBIAN-CVE-2026-84143

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was...

CVE-2026-84142

Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84145

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was...

CVE-2026-84143

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was...

CVE-2026-84121

Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

DEBIAN-CVE-2026-84119

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...