ImageMagick: Information Disclosure when printing profiles with debug enabled

When a profile is displayed with the identify command and the value is not printable a single byte at the end of the profile can be printed...

SUSE-SU-2026:3238-1 Security update for python-pyasn1

This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs bsc1271464. - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service bsc1271465. -...

OESA-2026-3114 pipewire security update

is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return.CVE-2026-14324...

OESA-2026-3107 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: Buffer Overflow vulnerability exists...

New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims

Dolphin X malware targets more than 300 apps and includes an AI Profiler that scores infected Windows PCs to help criminals identify high-value victims quickly...

CVE-2026-56392

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBVPX_VP9_fuzzer: Use-of-uninitialized-value in vpx_quantize_b_avx2

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5368579776905216 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBVPXVP9fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

SUSE CVE-2026-16560

A heap-buffer-overflow flaw was found in Directory Server 389-ds-base. When a DN contains a legacy-quoted value, the server won't close the heap allocation allowing another call to refer to the same memory pointer causing a denial of service or an arbitrary memory write operation...

CVE-2026-50103 Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...

CVE-2026-50103

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...

NPM: Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them

NPM: Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them vulnerability discovered by ? in WordPress Npm next-auth versions = 4.24.14...

2026-07-tare-nightbox33-cloud

Tare contest details - Join Sherlock Discordhttps://discor...

LMCache: 16-bit multimodal hash collision can poison KV cache entries

A flaw has been found in LMCache up to 0.4.6. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

PYSEC-2026-3480 LMCache: 16-bit multimodal hash collision can poison KV cache entries

A flaw has been found in LMCache up to 0.4.6. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

CVE-2026-50103: Improper Handling of Syntactically Invalid Structure

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...

The vulnerability of the vector_config() function in the arch/um/drivers/vector_kern.c module in 1 of the Linux operating system kernels, which allows a hacker to cause a service failure.

The vulnerability of the vectorconfig function in the arch/um/drivers/vectorkern.c module in 1 of the Linux kernel is related to the lack of checking the returned value. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the atmci_initSlot() function in the drivers/mmc/host/atmel-mci.c module of the Linux operating system’s MMC/SD/SDIO card driver kernel allows a attacker to cause a service failure.

The vulnerability of the atmciinitSlot function in the drivers/mmc/host/atmel-mci.c module of the Linux kernel’s MMC/SD/SDIO card driver lies in the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the opap_hsmmc_probe() function in the drivers/mmc/host/omap_hsmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the opaphsmmcprobe function in the driver/mmc/host/omaphsmmc.c file of the MMC/SD/SDIO card driver in the Linux operating system is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via the encodeHeaders in the STOMP frame encoder, which fails to validate or escape newline characters in header values for certain commands. An attacker can inject arbitrary headers by including newline characters in...

Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types

Summary Netty's Http3FrameCodec buffers incoming data for HTTP/3 reserved frame types up to the specified payload length without any limits. The payload length is read directly from the wire and trusted without validation. A bad actor can send a reserved frame with a payload length of up to...