ntpd-rs 安全漏洞

ntpd-rs is an open-source tool developed by Project Pendulum, designed for synchronizing computer clocks. It supports the NTP and NTS protocols. Versions of ntpd-rs prior to 1.7.1 contained security vulnerabilities. These vulnerabilities stemmed from the fact that when NTS was enabled on the...

PT-2026-7912

Name of the Vulnerable Software and Affected Versions ntpd-rs versions prior to 1.7.1 Description ntpd-rs is a full-featured implementation of the Network Time Protocol. An attacker can remotely cause moderate increases in CPU usage 2-4 times above normal. When Network Time System NTS is enabled ...

Sparse Autoencoders Are Capable LLM Jailbreak Mitigators

Jailbreak attacks remain a persistent threat to large language model safety. We propose Context-Conditioned Delta Steering CC-Delta, an SAE-based defense that identifies jailbreak-relevant sparse features by comparing token-level representations of the same harmful request with and without...

Grafana 安全漏洞

Grafana is a set of open-source monitoring tools provided by Grafana Open Source, which offer a visual monitoring interface. This tool is primarily used for monitoring and analyzing Graphite, InfluxDB, and Prometheus. Grafana has a security vulnerability; this vulnerability stems from the...

Directus 安全漏洞

Directus is an open-source real-time API and application dashboard developed by Directus. It is used to manage SQL database content. Versions of Directus prior to 11.14.1 contained a security vulnerability. This vulnerability stemmed from a time-based user enumeration vulnerability in the passwor...

openSUSE 16 Security Update : tailscale (openSUSE-SU-2026:20192-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20192-1 advisory. Changes in tailscale: - Update to version 1.94.0: IS SET and NOT SET have been added as device posture operators India DERP Region City Name...

GHSA-M4G2-2Q66-VC9V

creationtimestamp| type| source ---|---|--- 2026-02-11 23:10:05+00:00| seen| https://gist.github.com/alon710/7c1594c342afa1e0cba4cf7371023f4c...

CVE-2026-2321

creationtimestamp| type| source ---|---|--- 2026-02-11 21:58:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116054234584233655 2026-02-12 14:10:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3meo6aknzuu2e 2026-02-13 15:14:27+00:00| seen|...

CVE-2025-68663

Outline before version 1.1.0 contains a vulnerability in its WebSocket authentication mechanism that allows suspended users to maintain or establish real-time WebSocket connections and continue receiving sensitive operational updates after suspension. The issue is fixed in 1.1.0. CVSS metadata in...

CVE-2026-21523

Time-of-check time-of-use toctou race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network...

CVE-2026-21240

Time-of-check time-of-use toctou race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2025-66277

creationtimestamp| type| source ---|---|--- 2026-02-11 19:02:23+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116053542599641631...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple

CVE-2019-9053 - CMS Made Simple SQL Injection Exploit Modifie...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

SUSE-SU-2026:0453-1 Security update for rust-keylime

This update for rust-keylime fixes the following issues: Update to version 0.2.8+116. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257908. Other updates and bugfixes: - Update vendored crates time to...

CVE-2023-20548

A Time-of-check time-of-use TOCTOU race condition in the AMD Secure Processor ASP could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability...

CVE-2023-31324

A Time-of-check time-of-use TOCTOU race condition in the AMD Secure Processor ASP could allow an attacker to modify External Global Memory Interconnect Trusted Agent XGMI TA commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability...