sift

SIFT This is a metadata repository that is primarily used for discussiosn and issue tracking. cast -- installer cli saltstack -- states that actually do the work packer -- builds machine images using the above tools package-scripts -- builds certain packages hosted in SIFT PPA Supported Distros...

restler-fuzzer

RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI formerly Swagger specification, RESTler analyzes its...

CVE-2026-119423

OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim IP addresses in the lockouthandler by submitting crafted WebGUI login usernames. Attackers can submit usernames like 'Invalid user ' repeatedly to add the victim to the...

EUVD-2026-113803

OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim IP addresses in the lockouthandler by submitting crafted WebGUI login usernames. Attackers can submit usernames like 'Invalid user ' repeatedly to add the victim to the...

CVE-2026-119423 OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username

OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim IP addresses in the lockouthandler by submitting crafted WebGUI login usernames. Attackers can submit usernames like 'Invalid user ' repeatedly to add the victim to the...

CVE-2026-119423

OPNsense core versions prior to 26.7.8 are vulnerable to a log injection vulnerability (CWE-117). This flaw allows unauthenticated attackers to plant arbitrary victim IP addresses into the lockout_handler by submitting crafted usernames during WebGUI login attempts. By repeatedly submitting usern...

CVE-2026-119423 OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username

OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim IP addresses in the lockouthandler by submitting crafted WebGUI login usernames. Attackers can submit usernames like 'Invalid user ' repeatedly to add the victim to the...

CVE-2026-118556

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6...

Peter Cai Shelter security vulnerability

Peter Cai Shelter has a security vulnerability whereby attackers can register their own authkey and take control of other users’ binder service APIs and preference states...

DRUPAL-CONTRIB-2026-261

This module enables you to sell tangible products via Drupal Commerce that are organized into shipments for fulfillment. The module doesn't sufficiently protect shipment references and shipment entity fields, leading to an access bypass that can result in inappropriately modified shipment states ...

PT-2026-130585

This module enables you to sell tangible products via Drupal Commerce that are organized into shipments for fulfillment. The module doesn't sufficiently protect shipment references and shipment entity fields, leading to an access bypass that can result in inappropriately modified shipment states ...

Security Analysis of Ekert-Type QKD Protocol Coming under Cloning Attacks

We analyze the security of an Ekert type bipartite key distribution protocol coming under cloning attacks by an untrusted observer. Precisely, an eavesdropper is assumed to intercept and apply an asymmetric, phase-variant cloner on one or both qubits which are transmitted over public channel from...

Uncovering Why LLMs Fail: From Internal Mechanisms to Adversarial Reasoning Trajectories

Large language models LLMs are usually evaluated by final-output correctness or safety, yet an endpoint label does not reveal how a failure develops throughout the reasoning process. We therefore ask whether ordinary reasoning failures and adversarially induced failures can be characterized using...

Cisco Emergency Responder Unauthorized Access

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to improper handling of...

picard

PICARD Protocol-Introspecting Chunk Adapter for Resilient Data For the self-taught, the unconventional, and anyone who was ever told to stay in their lane. Keep building, keep exploring. PICARD encrypts your data, slices it into chunks, and scatters those chunks across whatever protocol endpoints...

CVE-2026-98869

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. A local attacker could achieve privilege escalation by loading a specially crafted BPF program into the kernel. The vulnerability occurs because the verifier fails to properly track register states across execution paths...

ROS-20261023-73-0137

The vulnerability in mbedtls is related to the return of incorrect code states. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because kfddbgtrapenable fails to revert enabled debug traps and related states when copying runtimeinfo into user space; as a result, trap states become inconsistent and...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.6. It stems from improper handling of response message consumption by the wireguard noise module after intermediate initialization; this results in a race condition that may lead to inconsistent handshake states or repeated session...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.12.111 and prior to 6.18.53. This vulnerability arises because lan966xfdmareload fails to restore rx-pageorder and rx-maxmtu upon failure to reload, as well as fails to restore the old page pool registration for XDP RXQs on each...