7565 matches found
GNUnet P2P Framework 0.26.2
GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...
IServ Schoolserver User Enumeration
IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...
Wapiti Web Application Vulnerability Scanner 3.3.2
Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...
Zeek 8.2.2
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...
angr 9.3.3
angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...
Zeek 8.0.10
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...
ldis Lua Disassembler 20260818
This is ldis, a disassembler for lua binary files. It works for binaries compiled by the 5.4 and 5.5 branches of lua, discovering the compiler used to compile into the opcodes, and delivers the assembly opcodes and data in an easy to read form. It is similar to the output produced by luac -l -l,...
Joern 4.0.606
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Fair ASR: Re-Evaluating Black-Box Jailbreaks under Shared Target-Call Budgets
Reliable jailbreak evaluation is essential for assessing LLM safety, but most existing studies rely solely on attack success rate ASR without accounting for its dependence on attack budgets, resulting in unfair comparisons across methods. Existing compute-aware evaluations reduce heterogeneous...
Red Hat Security Advisory 2026-55617-03
Red Hat Security Advisory 2026-55617-03 - An update for pcp is now available for Red Hat Enterprise Linux 10. Issues addressed include bypass, code execution, denial of service, integer overflow, and privilege escalation vulnerabilities...
Red Hat Security Advisory 2026-55756-03
Red Hat Security Advisory 2026-55756-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Issues addressed include buffer overflow and null...
Wavestore VMS 6.48.809 Remote Code Execution
Wavestore VMS version 6.48.809 contains a command injection vulnerability in the venusd /simple/export endpoint. An authenticated remote attacker can inject shell commands through the user parameter, resulting in arbitrary command execution with root-equivalent privileges. The included proof of...
Ubuntu Security Notice USN-8629-2
Ubuntu Security Notice 8629-2 - Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system...
Packet Sender 8.11.1
Packet Sender is an open source utility to allow sending and receiving TCP, UDP, and SSL encrypted TCP packets as well as HTTP/HTTPS requests and panel generation. The mainline branch officially supports Windows, Mac, and Desktop Linux with Qt. Other places may recompile and redistribute Packet...
Red Hat Security Advisory 2026-55757-03
Red Hat Security Advisory 2026-55757-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Issues addressed include buffer overflow and null...
xspawn macOS launchd Parent Spoofing Client
xspawn is a macOS process execution utility that submits programs directly to launchd through its private XPC bootstrap interface. Rather than executing the requested program itself, xspawn causes launchd to spawn the process through xpcproxy, resulting in Endpoint Security and EDR telemetry...
Joern 4.0.605
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Ubuntu Security Notice USN-8640-1
Ubuntu Security Notice 8640-1 - It was discovered that Engrampa incorrectly handled symbolic links when extracting certain archives. An attacker could possibly use this issue to write arbitrary files and execute arbitrary code...
SureForms 2.1.2 CSV Injection
SureForms version 2.1.2 and below contains an unauthenticated CSV injection vulnerability. A remote attacker can submit a specially crafted form field containing an encoded spreadsheet formula that is subsequently included in exported CSV data. When an administrator exports the submissions and...
Ghidra 12.1.3
Ghidra is a software reverse engineering SRE framework created and maintained by the National Security Agency Research Directorate. This framework includes a suite of full-featured, high-end software analysis tools that enable users to analyze compiled code on a variety of platforms including...
Red Hat Security Advisory 2026-55855-03
Red Hat Security Advisory 2026-55855-03 - An update for libssh is now available for Red Hat Enterprise Linux 10. Issues addressed include buffer overflow, bypass, denial of service, information leakage, and use-after-free vulnerabilities...
Red Hat Security Advisory 2026-56048-03
Red Hat Security Advisory 2026-56048-03 - An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.2 E4S for RHEL 9. Issues addressed include buffer overflow and null pointer vulnerabilities...
Red Hat Security Advisory 2026-55794-03
Red Hat Security Advisory 2026-55794-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Issues addressed include buffer overflow and null pointer...
PostgreSQL Remote Code Execution
PostgreSQL versions 14.0 through 14.23, 15.0 through 15.18, 16.0 through 16.14, 17.0 through 17.10, and 18.0 through 18.5 contain a heap buffer overflow in tochar when processing timezone abbreviations. An authenticated remote attacker able to execute SQL statements can exploit the vulnerability ...
Ubuntu Security Notice USN-8642-1
Ubuntu Security Notice 8642-1 - It was discovered that c3p0 was vulnerable to remote code execution via maliciously crafted serialized objects and JNDI references. An attacker could use this to execute arbitrary code, bypass security restrictions, or cause a denial of service...
Red Hat Security Advisory 2026-55764-03
Red Hat Security Advisory 2026-55764-03 - An update for kernel is now available for Red Hat Enterprise Linux 8. Issues addressed include code execution and out of bounds write vulnerabilities...
Red Hat Security Advisory 2026-55800-03
Red Hat Security Advisory 2026-55800-03 - An update for haproxy is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Issues addressed include denial of service and integer overflow vulnerabilities...
Red Hat Security Advisory 2026-55859-03
Red Hat Security Advisory 2026-55859-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8. Issues addressed include a denial of service vulnerability...
SUSE Security Advisory - SUSE-SU-2026:3639-1
SUSE Security Advisory - This update for redis7 fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...
SUSE Security Advisory - SUSE-SU-2026:3634-1
SUSE Security Advisory - This update for rsync fixes the following issues...
SUSE Security Advisory - SUSE-SU-2026:3637-1
SUSE Security Advisory - This update for redis fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...
SUSE Security Advisory - SUSE-SU-2026:3636-1
SUSE Security Advisory - This update for redis7 fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...
An Emulation Anchored Digital Twin Testbed for Cyberattack and Defense Analysis in Hospital IT OT Environments
Modern hospitals increasingly rely on integrated Information Technology IT and Operational Technology OT infrastructures to support critical healthcare services. However, this convergence expands the cybersecurity attack surface and makes safe validation of defensive mechanisms difficult on live...
Ubuntu Security Notice USN-8631-4
Ubuntu Security Notice 8631-4 - Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue...
Achievement Unlocked: Let'S Get Hacked! an Empirical Study of Cybercrime in the Video Gaming Ecosystem
The ubiquity of the video game industry and its large user base have transformed video games into complex social and economic ecosystems. Unfortunately, this growing popularity also attracts cybercriminals who deliberately exploit game-specific mechanisms to target players. Despite this growing...
Red Hat Security Advisory 2026-54769-03
Red Hat Security Advisory 2026-54769-03 - Red Hat OpenShift Container Platform release 4.22.10 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include bypass, code execution, denial of service, double free, out of bounds write,...
SUSE Security Advisory - SUSE-SU-2026:3638-1
SUSE Security Advisory - This update for redis fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...
Red Hat Security Advisory 2026-54580-03
Red Hat Security Advisory 2026-54580-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements...
Red Hat Security Advisory 2026-54599-03
Red Hat Security Advisory 2026-54599-03 - Red Hat OpenShift Container Platform release 4.21.29 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include bypass, information leakage, privilege escalation, and traversal vulnerabilities...
Red Hat Security Advisory 2026-33521-03
Red Hat Security Advisory 2026-33521-03 - An update for Red Hat Hardened Images RPMs is now available...
Red Hat Security Advisory 2026-54581-03
Red Hat Security Advisory 2026-54581-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include buffer overflow, bypass, information leakage, privilege escalation, and traversa...
Red Hat Security Advisory 2026-55804-03
Red Hat Security Advisory 2026-55804-03 - An update for nghttp2 is now available for Red Hat Enterprise Linux 8...
Red Hat Security Advisory 2026-55772-03
Red Hat Security Advisory 2026-55772-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9. Issues addressed include denial of service and integer overflow vulnerabilities...
Red Hat Security Advisory 2026-56143-03
Red Hat Security Advisory 2026-56143-03 - An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Issues addressed include a privilege escalation vulnerability...
Red Hat Security Advisory 2026-55858-03
Red Hat Security Advisory 2026-55858-03 - An update for .NET 10.0 is now available for Red Hat Enterprise Linux 10. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...
Red Hat Security Advisory 2026-55930-03
Red Hat Security Advisory 2026-55930-03 - An update for modhttp2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and out of bounds read vulnerabilities...
JetBrains Datalore 2026.2.3 Remote Code Execution
JetBrains Datalore On-Premises version 2026.2.3 contains an authorization flaw in publicly shared interactive reports. An unauthenticated remote attacker with access to a public report can have READ permissions incorrectly mapped to EXECUTE permissions, allowing access to computation RPC methods...
Red Hat Security Advisory 2026-55857-03
Red Hat Security Advisory 2026-55857-03 - An update for .NET 10.0 is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...
RoboTask 11.0.5.1229 Authentication Bypass
RoboTask version 11.0.5.1229 contains a missing authentication vulnerability in its REST API. When the REST service is enabled with its default API-key setting, a remote unauthenticated attacker can enumerate and trigger existing tasks. Tasks execute with the privileges of the RoboTask process an...