agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

CVE-2026-25924

CVE-2026-25924 PoC - Kanboard Admin RCE Proof-of-Concept for Administrative RCE via Security Control Bypass Disclosure: Originally reported by me via GHSA-grch-p7vf-vc4f ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID| CVE-2026-25924 Severity| 🔴...

openSUSE 16 Security Update : rust-keylime (openSUSE-SU-2026:22249-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22249-1 advisory. This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central...

SUSE SLES16 Security Update : rust-keylime (SUSE-SU-2026:24658-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24658-1 advisory. This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

EUVD-2026-122893

A vulnerability exists in a monitoring component that may, under certain conditions, allow security controls to be circumvented. Successful exploitation could result in unauthorized access to information intended for authorized users only...

Security update for rust-keylime (important)

openSUSE security update: security update for rust-keylime ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22249-1 Rating: important References: bsc1287921 Cross-References: CVE-2026-115905 CVE-2026-115906 CVE-2026-115907 CVE-2026-115908...

CVE-2026-103866

A flaw was found in Apache Sling Engine. A remote attacker could perform HTTP request smuggling by sending specially crafted requests containing non-standard percent-encoded characters or invalid character sets. Because the query and form parser continues processing requests despite encountering...

OPENSUSE-SU-2026:22249-1 Security update for rust-keylime

This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 - CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc128792...

Security update for rust-keylime

This update for rust-keylime fixes the following issue: CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc1287921...

SUSE-SU-2026:24641-1 Security update for rust-keylime

This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 - CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc128792...

SUSE-SU-2026:24658-1 Security update for rust-keylime

This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 - CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc128792...

Security update for rust-keylime

This update for rust-keylime fixes the following issue: CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc1287921...

CVE-2026-116566

A flaw was found in Python. An attacker could bypass security controls and redirect network connections to unintended destinations due to improper input handling in the socket.getaddrinfo function. Specifically, when host or port parameters contain null byte characters, the values are silently...

EUVD-2025-211243

When utilizing JWT Bearer or SAML2 Bearer grant types, the system fails to validate the status of the Identity Provider IDP before issuing access tokens. This oversight permits tokens to be generated even when the associated IDP has been disabled. A malicious actor could leverage this vulnerabili...

Security update for rust-keylime

This update for rust-keylime fixes the following issue: CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc1287921...

SUSE-SU-2026:4931-1 Security update for rust-keylime

This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 - CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc128792...

Security update for rust-keylime

This update for rust-keylime fixes the following issue: CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc1287921...

SUSE-SU-2026:4930-1 Security update for rust-keylime

This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 - CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc128792...

CVE-2026-78660

A flaw was found in Go's net/http package. When operating as a reverse proxy, the HTTP/2 implementation does not properly validate framing-related headers in responses received from upstream servers before forwarding them to downstream HTTP/1 clients. A malicious upstream server can exploit this...