Astra Linux – Vulnerability in uriparser

A issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax...

SUSE CVE-2026-10233

A security vulnerability has been detected in Assimp up to 6.0.4. Affected by this issue is the function HL1MDLLoader::readsequenceinfos of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. The manipulation of the argument aiString leads to out-of-bounds read. The attack needs to...

Astra Linux – Vulnerability in advancecomp

It was discovered that Advancecomp v2.3 contains a heap buffer overflow vulnerability...

Claude Code has Permission Deny Bypass Through Symbolic Links

Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file such as /etc/passwd and Claude Code had access to a symbolic link pointing to that file, it was possible for Claude...

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an overly strict BUGON assertion in osdmapapplyincremental, potentially leading to a crash...

EUVD-2018-11962

Malware in sbrugna...

EUVD-2015-4300

Malware in sbrugna...

EUVD-2020-14299

Malware in sbrugna...

EUVD-2019-19023

Malware in sbrugna...

EUVD-2016-3577

Malware in sbrugna...

EUVD-2011-2907

Malware in sbrugna...

EUVD-2021-2135

Malware in sbrugna...

EUVD-2012-0366

Malware in sbrugna...

EUVD-2019-10578

Malware in sbrugna...

OSV-2025-819 Use-of-uninitialized-value in HasAlpha32b_SSE2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449546226 Crash type: Use-of-uninitialized-value Crash state: HasAlpha32bSSE2 WebPPictureHasTransparency VP8LEncodeImage...

EUVD-2024-43828

Malicious code in bioql PyPI...

scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()

...

GUI Issue - Unbinding the LogAction from Rewrite policy fails from GUI but works from Cli

Re-Write Policy is configured with a Log Action bound to it. When the Log Action is removed from the policy via the GUI, the policy is not actually removed. After hitting 'OK', there's no error, and the Log Action is still bound when checked again...

ASB-A-191743558

In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly revert to the default assistant application when a user-selected assistant is forcibly stopped due to a logic error in the code. This could lead to local escalation of privilege...

CVE-2025-30077

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits...