BIT-KEYCLOAK-2024-7318 Keycloak-core: one time passcode (otp) is valid longer than expiration timeseverity

A vulnerability was found in Keycloak. Expired OTP codes are still usable when using FreeOTP when the OTP token period is set to 30 seconds default. Instead of expiring and deemed unusable around 30 seconds in, the tokens are valid for an additional 30 seconds totaling 1 minute. A one time passco...

CVE-2026-55059

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

PT-2026-80937

The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BT CONN CB DEFINE, so security changed runs for every connection that establishes security even before the application has called bt has register. The service attribut...

CVE-2026-74836 HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit

Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin an unbounded number of HTTP/2 stream processes indefinitely via connection-level flow control. When a stream's response body outruns the HTTP/2 connection-level se...

Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI

Summary Ember's interactive TUI renders fields taken from the monitored Caddy server's access logs — most notably the request URI — straight to the operator's terminal without neutralising terminal escape or control sequences CWE-150. Those log fields are populated from arbitrary, unauthenticated...

EUVD-2025-210752

HCL IntelliOps Event Management IEM is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior...

CVE-2025-62300 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior...

CVE-2025-62300 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior...

CVE-2025-62300

HCL IntelliOps Event Management (IEM) has a race condition creating a timing window where an unauthenticated, network-adjacent attacker can modify a resource, causing unpredictable behavior with high integrity impact (CVSS 5.9). No patch version or exploit details are provided; monitor HCL PSIRT ...

PT-2026-78946

Name of the Vulnerable Software and Affected Versions HCL IntelliOps Event Management IEM affected versions not specified Description A race condition exists in the software. This creates a timing window that allows an attacker to modify a resource, leading to unpredictable behavior. A race...

libp2p: yamux connection DoS via oversized data frame

SummaryThe yamux stream multiplexer in py-libp2p does not validate incoming DATA frame lengths against the receive window before reading the frame body. Any peer that completes a standard libp2p handshake can send a single 12-byte frame claiming a 4 GB body, causing the victim's yamux read loop t...

CVE-2026-58085

The wg(4) driver in FreeBSD contains a flaw where it fails to verify the success of the MAC verification step after dispatching a decrypt operation to the OpenCrypto framework (OCF) . This allows the driver to silently accept packets with an invalid Poly1305 authentication tag. A remote attacker ...

CVE-2026-52873 Streambert: Global CSP Removal in Wyzie Redeem Window Enables Unconstrained XSS in Electron Renderer

Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until version 2.6.0, the wyzie-open-redeem IPC handler in index.js creates the partition:wyzie-redeem Electron session and registers an onHeadersReceived hook that removes the...

httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack

A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...

PT-2026-78236

Name of the Vulnerable Software and Affected Versions Streambert versions 2.5.0 through 2.5.9 Description Streambert is a cross-platform Electron Desktop App used for streaming and downloading video content. The wyzie-open-redeem IPC handler in index.js creates a partition:wyzie-redeem Electron...

BIT-MONGODB-2026-13065 MongoDB $linearFill Window Function Improper Input Validation Leading to Process Termination

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101163)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101163 advisory. Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and...

CVE-2026-74429

CVE-2026-74429 describes a Linux kernel issue in rxrpc where a reply DATA packet can be received before the client has sent any request DATA packets, potentially causing an oops in rxrpc_rotate_tx_window. The fix updates rxrpc_receiving_reply() to detect an apparent reply before exposure of the c...

DTLS server cookie bypass during startup window due to empty initial cookie secret

...

CVE-2026-73506

A flaw was found in Oh My Posh, a customizable terminal prompt renderer. The software failed to properly sanitize attacker-controlled data, such as current directory names and Git metadata, before displaying it in the terminal. This oversight allows for terminal escape sequence injection, enablin...