MINI-MGJ2-QCXX-V562

Bulletin has no description...

CVE-2026-64964 Generation of Predictable Email Confirmation Token in ATutor

ATutor generates predictable email confirmation tokens due to the use of insufficiently random values in the account confirmation functionality. Due to the use of predictable values related to user registration, an attacker who knows or can predict these values can guess valid account activation...

CVE-2026-64961 Authentication Bypass in ATutor

ATutor is vulnerable to authentication bypass . Although a token validation check is present in the auto-login functionality, the values required for token validation remain uninitialized in certain code paths. An unauthenticated attacker who can determine a user's identifier and registration...

CVE-2026-64960 Remote Code Execution via Unrestricted File Upload in ATutor

ATutor Gameme module allows users to upload files of any type and extension without restriction. Due to improper handling of file uploads, files are stored in a web-accessible location before their content is validated. An authenticated attacker who knows a valid courseid can upload a...

MINI-W2X3-3GW9-2C5R

Bulletin has no description...

MINI-FQHH-9XH8-QH4V

Bulletin has no description...

MINI-XR3M-78C3-9GFG

Bulletin has no description...

MINI-44G9-J4Q9-5WP3

Bulletin has no description...

MINI-HV6C-JJ5V-6XGW

Bulletin has no description...

MINI-553P-H93R-J8RW

Bulletin has no description...

Malicious code in test-flow-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e7f0fbad80f9bdcba1c9d37322137d8f3a7bd86353650c5f946c73b1bb4637 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

kin v0.5.42

The diff is not the change. AI agents can write a change faster than a team can establish what it touches, whether it reverses an earlier fix, and how far its consequences reach. Git records files and line history. Kin records the software itself as a graph of entities, relations, changes, and...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (rocm)

Red Hat AI Inference 3.4.4 rocm is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (spyre)

Red Hat AI Inference 3.4.4 spyre is now available. Red Hat AI Inference...

Moderate: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.4 (cuda)

Red Hat AI Inference Model Optimization Tools 3.4.4 cuda is now available. Red Hat AI Inference Model Optimization Tools...

CVE-2026-76346

creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:00+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

GHSA-CR32-G25G-VXJJ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips...

GHSA-Q496-Q274-JGH9 vulnerabilities

Vulnerabilities for packages: exim...

PT-2026-79010

ATutor is vulnerable to Cross-Site Request Forgery CSRF in profile update functionality. An attacker can craft a malicious website which, when visited by an authenticated victim, submits a forged request to the system. Due to the lack of proper CSRF token implementation, the forged request is...

The Software Supply Chain As a Market for Lemons: A Multivocal Review of Trust Signal Collapse

Practitioners evaluating open-source dependencies rely on cheap trust signals, e.g., stars, download counts, and contributor activity, as substitutes for direct code inspection, assuming those signals reflect genuine trustworthiness. Prior work has documented individual signal gaming, but the...