Red Hat Security Advisory 2026-55794-03

Red Hat Security Advisory 2026-55794-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Issues addressed include buffer overflow and null pointer...

SUSE Security Advisory - SUSE-SU-2026:3636-1

SUSE Security Advisory - This update for redis7 fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...

SUSE Security Advisory - SUSE-SU-2026:3637-1

SUSE Security Advisory - This update for redis fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...

SUSE Security Advisory - SUSE-SU-2026:3639-1

SUSE Security Advisory - This update for redis7 fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...

Capability-Based Planning for AI Crisis Preparedness

Capability-based planning drives preparedness in defense and homeland security, but has yet to be applied seriously to AI. Government AI preparations follow a predict-then-act paradigm: rank risks by likelihood and impact, then prepare for the highest expected harm. AI resists prediction: expert...

Packet Sender 8.11.1

Packet Sender is an open source utility to allow sending and receiving TCP, UDP, and SSL encrypted TCP packets as well as HTTP/HTTPS requests and panel generation. The mainline branch officially supports Windows, Mac, and Desktop Linux with Qt. Other places may recompile and redistribute Packet...

Fair ASR: Re-Evaluating Black-Box Jailbreaks under Shared Target-Call Budgets

Reliable jailbreak evaluation is essential for assessing LLM safety, but most existing studies rely solely on attack success rate ASR without accounting for its dependence on attack budgets, resulting in unfair comparisons across methods. Existing compute-aware evaluations reduce heterogeneous...

Red Hat Security Advisory 2026-55855-03

Red Hat Security Advisory 2026-55855-03 - An update for libssh is now available for Red Hat Enterprise Linux 10. Issues addressed include buffer overflow, bypass, denial of service, information leakage, and use-after-free vulnerabilities...

Red Hat Security Advisory 2026-55764-03

Red Hat Security Advisory 2026-55764-03 - An update for kernel is now available for Red Hat Enterprise Linux 8. Issues addressed include code execution and out of bounds write vulnerabilities...

Ubuntu Security Notice USN-8640-1

Ubuntu Security Notice 8640-1 - It was discovered that Engrampa incorrectly handled symbolic links when extracting certain archives. An attacker could possibly use this issue to write arbitrary files and execute arbitrary code...

SureForms 2.1.2 CSV Injection

SureForms version 2.1.2 and below contains an unauthenticated CSV injection vulnerability. A remote attacker can submit a specially crafted form field containing an encoded spreadsheet formula that is subsequently included in exported CSV data. When an administrator exports the submissions and...

SUSE Security Advisory - SUSE-SU-2026:3634-1

SUSE Security Advisory - This update for rsync fixes the following issues...

Red Hat Security Advisory 2026-55757-03

Red Hat Security Advisory 2026-55757-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Issues addressed include buffer overflow and null...

PostgreSQL Remote Code Execution

PostgreSQL versions 14.0 through 14.23, 15.0 through 15.18, 16.0 through 16.14, 17.0 through 17.10, and 18.0 through 18.5 contain a heap buffer overflow in tochar when processing timezone abbreviations. An authenticated remote attacker able to execute SQL statements can exploit the vulnerability ...

Achievement Unlocked: Let'S Get Hacked! an Empirical Study of Cybercrime in the Video Gaming Ecosystem

The ubiquity of the video game industry and its large user base have transformed video games into complex social and economic ecosystems. Unfortunately, this growing popularity also attracts cybercriminals who deliberately exploit game-specific mechanisms to target players. Despite this growing...

An Emulation Anchored Digital Twin Testbed for Cyberattack and Defense Analysis in Hospital IT OT Environments

Modern hospitals increasingly rely on integrated Information Technology IT and Operational Technology OT infrastructures to support critical healthcare services. However, this convergence expands the cybersecurity attack surface and makes safe validation of defensive mechanisms difficult on live...

Joern 4.0.605

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Ghidra 12.1.3

Ghidra is a software reverse engineering SRE framework created and maintained by the National Security Agency Research Directorate. This framework includes a suite of full-featured, high-end software analysis tools that enable users to analyze compiled code on a variety of platforms including...

Red Hat Security Advisory 2026-55859-03

Red Hat Security Advisory 2026-55859-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8. Issues addressed include a denial of service vulnerability...

Red Hat Security Advisory 2026-55800-03

Red Hat Security Advisory 2026-55800-03 - An update for haproxy is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Issues addressed include denial of service and integer overflow vulnerabilities...

Ubuntu Security Notice USN-8631-4

Ubuntu Security Notice 8631-4 - Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue...

Ubuntu Security Notice USN-8629-2

Ubuntu Security Notice 8629-2 - Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system...

Red Hat Security Advisory 2026-33521-03

Red Hat Security Advisory 2026-33521-03 - An update for Red Hat Hardened Images RPMs is now available...

Red Hat Security Advisory 2026-54769-03

Red Hat Security Advisory 2026-54769-03 - Red Hat OpenShift Container Platform release 4.22.10 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include bypass, code execution, denial of service, double free, out of bounds write,...

Red Hat Security Advisory 2026-55930-03

Red Hat Security Advisory 2026-55930-03 - An update for modhttp2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and out of bounds read vulnerabilities...

Red Hat Security Advisory 2026-55765-03

Red Hat Security Advisory 2026-55765-03 - An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Issues addressed include code execution and out of bounds write vulnerabilities...

SUSE Security Advisory - SUSE-SU-2026:3638-1

SUSE Security Advisory - This update for redis fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...

Red Hat Security Advisory 2026-54580-03

Red Hat Security Advisory 2026-54580-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements...

Microsoft Windows Admin Center Remote Code Execution

Microsoft Windows Admin Center builds prior to 2.7.4 contain a command injection vulnerability in the PowerShell tool REST API. An authenticated low-privileged gateway user can supply arbitrary commands through the properties.script field of an invokeCommand request, resulting in command executio...

Red Hat Security Advisory 2026-55772-03

Red Hat Security Advisory 2026-55772-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9. Issues addressed include denial of service and integer overflow vulnerabilities...

Typemill 2.25.0 Authorization Bypass

Typemill version 2.25.0 and below contains an authorization bypass vulnerability in role-restricted media downloads. The application performs its authorization check using the raw request path while accessing the file using the filesystem-resolved path. An unauthenticated remote attacker can use...

Red Hat Security Advisory 2026-56143-03

Red Hat Security Advisory 2026-56143-03 - An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Issues addressed include a privilege escalation vulnerability...

Red Hat Security Advisory 2026-55804-03

Red Hat Security Advisory 2026-55804-03 - An update for nghttp2 is now available for Red Hat Enterprise Linux 8...

Incident-Data Robustness Analysis of the OWASP Top 10 for LLM Applications (2026): How a Community-Expert Ranking Holds up against a Large-Scale LLM Incident Corpus

The OWASP Top 10 for LLM Applications ranks the risks that a community of security practitioners judges most important. We ask a narrower question: checked against the record of real incidents, does that expert ranking agree with the data? We assembled a large-scale corpus of LLM-security inciden...

Red Hat Security Advisory 2026-55803-03

Red Hat Security Advisory 2026-55803-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Issues addressed include denial of service and integer overflow vulnerabilities...

Red Hat Security Advisory 2026-55858-03

Red Hat Security Advisory 2026-55858-03 - An update for .NET 10.0 is now available for Red Hat Enterprise Linux 10. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...

Red Hat Security Advisory 2026-55857-03

Red Hat Security Advisory 2026-55857-03 - An update for .NET 10.0 is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...

Benchmarking Automated Security Patch Backporting: How Far Are We?

Automated security patch backporting is critical for mitigating N-day vulnerabilities. Recent tools report success rates above 80% on their respective datasets. However, these evaluations are often confined to homogeneous environments, such as one repository or specific project versions...

Red Hat Security Advisory 2026-56130-03

Red Hat Security Advisory 2026-56130-03 - An update for sg3utils is now available for Red Hat Enterprise Linux 8...

TENET: Telegram Mini App (In)Security

Telegram, with over 450 million daily active users, has introduced Mini Apps---web-based applications running directly within its client. However, this integration introduces notable security risks. As we demonstrate, many Mini Apps store authentication materials---such as session tokens and wall...

Red Hat Security Advisory 2026-54599-03

Red Hat Security Advisory 2026-54599-03 - Red Hat OpenShift Container Platform release 4.21.29 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include bypass, information leakage, privilege escalation, and traversal vulnerabilities...

Red Hat Security Advisory 2026-55862-03

Red Hat Security Advisory 2026-55862-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Issues addressed include a denial of service vulnerability...

Red Hat Security Advisory 2026-55802-03

Red Hat Security Advisory 2026-55802-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and integer overflow vulnerabilities...

Red Hat Security Advisory 2026-55861-03

Red Hat Security Advisory 2026-55861-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Issues addressed include a denial of service vulnerability...

Red Hat Security Advisory 2026-55856-03

Red Hat Security Advisory 2026-55856-03 - An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...

Red Hat Security Advisory 2026-54581-03

Red Hat Security Advisory 2026-54581-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include buffer overflow, bypass, information leakage, privilege escalation, and traversa...

Red Hat Security Advisory 2026-56219-03

Red Hat Security Advisory 2026-56219-03 - An update for python3 is now available for Red Hat Enterprise Linux 8. Issues addressed include a bypass vulnerability...

RoboTask 11.0.5.1229 Authentication Bypass

RoboTask version 11.0.5.1229 contains a missing authentication vulnerability in its REST API. When the REST service is enabled with its default API-key setting, a remote unauthenticated attacker can enumerate and trigger existing tasks. Tasks execute with the privileges of the RoboTask process an...

ActFax Server 10.70 Remote Code Execution

ActFax Server version 10.70 contains an unauthenticated remote code execution vulnerability in its LPD service. A remote attacker can submit a crafted print job containing an @F211 fax destination and PostScript content that abuses the Ghostscript pipe operator. When the document is rasterized by...

JetBrains Datalore 2026.2.3 Remote Code Execution

JetBrains Datalore On-Premises version 2026.2.3 contains an authorization flaw in publicly shared interactive reports. An unauthenticated remote attacker with access to a public report can have READ permissions incorrectly mapped to EXECUTE permissions, allowing access to computation RPC methods...