8740 matches found
Red Hat Security Advisory 2026-55757-03
Red Hat Security Advisory 2026-55757-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Issues addressed include buffer overflow and null...
Red Hat Security Advisory 2026-55679-03
Red Hat Security Advisory 2026-55679-03 - An update for haproxy is now available for Red Hat Enterprise Linux 10. Issues addressed include denial of service and integer overflow vulnerabilities...
Red Hat Security Advisory 2026-55800-03
Red Hat Security Advisory 2026-55800-03 - An update for haproxy is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Issues addressed include denial of service and integer overflow vulnerabilities...
Red Hat Security Advisory 2026-55740-03
Red Hat Security Advisory 2026-55740-03 - An update for pcp is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, code execution, denial of service, integer overflow, and privilege escalation vulnerabilities...
Red Hat Security Advisory 2026-55859-03
Red Hat Security Advisory 2026-55859-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8. Issues addressed include a denial of service vulnerability...
SUSE Security Advisory - SUSE-SU-2026:3638-1
SUSE Security Advisory - This update for redis fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...
Red Hat Security Advisory 2026-55841-03
Red Hat Security Advisory 2026-55841-03 - An update for unbound is now available for Red Hat Enterprise Linux 9. Issues addressed include a denial of service vulnerability...
Veeam ONE Reporter 13.1 Remote Code Execution
Veeam ONE Reporter version 13.1 contains an authenticated remote code execution vulnerability in dashboard scheduling. A remote PowerUser can supply an arbitrary command through reportSettings.command, which is subsequently executed without command validation or privilege reduction. Commands...
Joern 4.0.605
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
ActFax Server 10.70 Remote Code Execution
ActFax Server version 10.70 contains an unauthenticated remote code execution vulnerability in its LPD service. A remote attacker can submit a crafted print job containing an @F211 fax destination and PostScript content that abuses the Ghostscript pipe operator. When the document is rasterized by...
Fair ASR: Re-Evaluating Black-Box Jailbreaks under Shared Target-Call Budgets
Reliable jailbreak evaluation is essential for assessing LLM safety, but most existing studies rely solely on attack success rate ASR without accounting for its dependence on attack budgets, resulting in unfair comparisons across methods. Existing compute-aware evaluations reduce heterogeneous...
Red Hat Security Advisory 2026-54769-03
Red Hat Security Advisory 2026-54769-03 - Red Hat OpenShift Container Platform release 4.22.10 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include bypass, code execution, denial of service, double free, out of bounds write,...
Red Hat Security Advisory 2026-55756-03
Red Hat Security Advisory 2026-55756-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Issues addressed include buffer overflow and null...
Red Hat Security Advisory 2026-55794-03
Red Hat Security Advisory 2026-55794-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Issues addressed include buffer overflow and null pointer...
Red Hat Security Advisory 2026-55803-03
Red Hat Security Advisory 2026-55803-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Issues addressed include denial of service and integer overflow vulnerabilities...
Red Hat Security Advisory 2026-55858-03
Red Hat Security Advisory 2026-55858-03 - An update for .NET 10.0 is now available for Red Hat Enterprise Linux 10. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...
Red Hat Security Advisory 2026-56029-03
Red Hat Security Advisory 2026-56029-03 - An update for pipewire is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Issues addressed include a code execution vulnerability...
Red Hat Security Advisory 2026-56143-03
Red Hat Security Advisory 2026-56143-03 - An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Issues addressed include a privilege escalation vulnerability...
Ubuntu Security Notice USN-8629-2
Ubuntu Security Notice 8629-2 - Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system...
SureForms 2.1.2 CSV Injection
SureForms version 2.1.2 and below contains an unauthenticated CSV injection vulnerability. A remote attacker can submit a specially crafted form field containing an encoded spreadsheet formula that is subsequently included in exported CSV data. When an administrator exports the submissions and...
xspawn macOS launchd Parent Spoofing Client
xspawn is a macOS process execution utility that submits programs directly to launchd through its private XPC bootstrap interface. Rather than executing the requested program itself, xspawn causes launchd to spawn the process through xpcproxy, resulting in Endpoint Security and EDR telemetry...
Ghidra 12.1.3
Ghidra is a software reverse engineering SRE framework created and maintained by the National Security Agency Research Directorate. This framework includes a suite of full-featured, high-end software analysis tools that enable users to analyze compiled code on a variety of platforms including...
RoboTask 11.0.5.1229 Authentication Bypass
RoboTask version 11.0.5.1229 contains a missing authentication vulnerability in its REST API. When the REST service is enabled with its default API-key setting, a remote unauthenticated attacker can enumerate and trigger existing tasks. Tasks execute with the privileges of the RoboTask process an...
Ubuntu Security Notice USN-8640-1
Ubuntu Security Notice 8640-1 - It was discovered that Engrampa incorrectly handled symbolic links when extracting certain archives. An attacker could possibly use this issue to write arbitrary files and execute arbitrary code...
tcpreplay 4.6.1
tcpreplay is a BSD-style licensed tool to replay saved tcpdump files at arbitrary speeds. It provides a variety of features for replaying traffic for both passive sniffer devices as well as inline devices such as routers, firewalls, and intrusion detection systems. Many NIDSs fare poorly when...
Packet Sender 8.11.1
Packet Sender is an open source utility to allow sending and receiving TCP, UDP, and SSL encrypted TCP packets as well as HTTP/HTTPS requests and panel generation. The mainline branch officially supports Windows, Mac, and Desktop Linux with Qt. Other places may recompile and redistribute Packet...
SUSE Security Advisory - SUSE-SU-2026:3639-1
SUSE Security Advisory - This update for redis7 fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...
Red Hat Security Advisory 2026-56050-03
Red Hat Security Advisory 2026-56050-03 - An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 E4S for RHEL 9. Issues addressed include buffer overflow and null pointer vulnerabilities...
TENET: Telegram Mini App (In)Security
Telegram, with over 450 million daily active users, has introduced Mini Apps---web-based applications running directly within its client. However, this integration introduces notable security risks. As we demonstrate, many Mini Apps store authentication materials---such as session tokens and wall...
Microsoft Windows Admin Center Remote Code Execution
Microsoft Windows Admin Center builds prior to 2.7.4 contain a command injection vulnerability in the PowerShell tool REST API. An authenticated low-privileged gateway user can supply arbitrary commands through the properties.script field of an invokeCommand request, resulting in command executio...
dyen macOS In-Memory Mach-O Loader
dyen is a macOS in-memory Mach-O dynamic library loader designed to execute a dylib using the stock Python interpreter without writing the decrypted Mach-O to disk or registering the payload with dyld. It supports encrypted standalone payloads and encrypted dylibs appended to otherwise valid cove...
An Emulation Anchored Digital Twin Testbed for Cyberattack and Defense Analysis in Hospital IT OT Environments
Modern hospitals increasingly rely on integrated Information Technology IT and Operational Technology OT infrastructures to support critical healthcare services. However, this convergence expands the cybersecurity attack surface and makes safe validation of defensive mechanisms difficult on live...
Red Hat Security Advisory 2026-54581-03
Red Hat Security Advisory 2026-54581-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include buffer overflow, bypass, information leakage, privilege escalation, and traversa...
memdumper macOS EDR Process Attribution Evasion
memdumper is a macOS process memory inspection utility that injects a dynamic library into an existing signed binary possessing Apple debugger and DYLD-related entitlements. The injected library uses the entitled process to obtain a target task port, search or dump readable process memory, attach...
PostgreSQL Remote Code Execution
PostgreSQL versions 14.0 through 14.23, 15.0 through 15.18, 16.0 through 16.14, 17.0 through 17.10, and 18.0 through 18.5 contain a heap buffer overflow in tochar when processing timezone abbreviations. An authenticated remote attacker able to execute SQL statements can exploit the vulnerability ...
AdaRare: Telemetry-Guided Joint Profile Control for Greybox Fuzzing
Greybox fuzzers combine interacting queue, mutation, dictionary, energy, and comparison-solving control surfaces, while prior adaptive systems typically optimize other decision objects or control layers. We present AdaRare, an AFL++ extension that coordinates five internal actuation mechanisms as...
Red Hat Security Advisory 2026-55802-03
Red Hat Security Advisory 2026-55802-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and integer overflow vulnerabilities...
Incident-Data Robustness Analysis of the OWASP Top 10 for LLM Applications (2026): How a Community-Expert Ranking Holds up against a Large-Scale LLM Incident Corpus
The OWASP Top 10 for LLM Applications ranks the risks that a community of security practitioners judges most important. We ask a narrower question: checked against the record of real incidents, does that expert ranking agree with the data? We assembled a large-scale corpus of LLM-security inciden...
Red Hat Security Advisory 2026-55765-03
Red Hat Security Advisory 2026-55765-03 - An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Issues addressed include code execution and out of bounds write vulnerabilities...
Benchmarking Automated Security Patch Backporting: How Far Are We?
Automated security patch backporting is critical for mitigating N-day vulnerabilities. Recent tools report success rates above 80% on their respective datasets. However, these evaluations are often confined to homogeneous environments, such as one repository or specific project versions...
Wavestore VMS 6.48.809 Remote Code Execution
Wavestore VMS version 6.48.809 contains a command injection vulnerability in the venusd /simple/export endpoint. An authenticated remote attacker can inject shell metacharacters into the user parameter, which is URL-decoded and passed without sanitization to a command executed through popen...
Red Hat Security Advisory 2026-55860-03
Red Hat Security Advisory 2026-55860-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Issues addressed include a denial of service vulnerability...
Red Hat Security Advisory 2026-55857-03
Red Hat Security Advisory 2026-55857-03 - An update for .NET 10.0 is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...
Wavestore VMS 6.48.809 Remote Code Execution
Wavestore VMS version 6.48.809 contains a command injection vulnerability in the venusd /simple/export endpoint. An authenticated remote attacker can inject shell commands through the user parameter, resulting in arbitrary command execution with root-equivalent privileges. The included proof of...
Red Hat Security Advisory 2026-56130-03
Red Hat Security Advisory 2026-56130-03 - An update for sg3utils is now available for Red Hat Enterprise Linux 8...
Red Hat Security Advisory 2026-55772-03
Red Hat Security Advisory 2026-55772-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9. Issues addressed include denial of service and integer overflow vulnerabilities...
Docmosis Tornado 2.11.3 Remote Code Execution
Docmosis Tornado version 2.11.3 contains an unauthenticated arbitrary file write vulnerability in the /api/render endpoint. A remote attacker can use the storeTo parameter with a file: destination to write rendered content to arbitrary new filesystem paths. When the service runs as root, a crafte...
Typemill 2.25.0 Authorization Bypass
Typemill version 2.25.0 and below contains an authorization bypass vulnerability in role-restricted media downloads. The application performs its authorization check using the raw request path while accessing the file using the filesystem-resolved path. An unauthenticated remote attacker can use...
Red Hat Security Advisory 2026-55862-03
Red Hat Security Advisory 2026-55862-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Issues addressed include a denial of service vulnerability...