Red Hat Security Advisory 2026-55679-03

Red Hat Security Advisory 2026-55679-03 - An update for haproxy is now available for Red Hat Enterprise Linux 10. Issues addressed include denial of service and integer overflow vulnerabilities...

Red Hat Security Advisory 2026-55841-03

Red Hat Security Advisory 2026-55841-03 - An update for unbound is now available for Red Hat Enterprise Linux 9. Issues addressed include a denial of service vulnerability...

Red Hat Security Advisory 2026-56047-03

Red Hat Security Advisory 2026-56047-03 - An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.7 E4S for RHEL 8. Issues addressed include buffer overflow and null pointer vulnerabilities...

MobileWorldSafety: Benchmarking GUI Agent Safety against Environmental Injection Attacks in Android Apps

LLM-powered GUI agents that autonomously operate smartphones are rapidly transitioning from research prototypes to early real-world deployment. However, because these agents routinely process untrusted environmental content, they are highly vulnerable to environmental injection attacks, which...

Red Hat Security Advisory 2026-55560-03

Red Hat Security Advisory 2026-55560-03 - An update for pcp is now available for Red Hat Enterprise Linux 8. Issues addressed include bypass, code execution, denial of service, integer overflow, and privilege escalation vulnerabilities...

Gitea 1.27.0 diffpatch Remote Code Execution

Gitea version 1.27.0 and below contains a remote code execution vulnerability in the diffpatch API. An authenticated attacker with repository write access can submit the same specially crafted patch multiple times to trigger Git's three-way merge fallback and cause an executable post-index-change...

Red Hat Security Advisory 2026-55892-03

Red Hat Security Advisory 2026-55892-03 - An update for unbound is now available for Red Hat Enterprise Linux 10. Issues addressed include a denial of service vulnerability...

LifeOS 7.40.4

LifeOS is a Life Operating System. It knows your goals, the people who matter to you, and where you are right now, and it works to move you toward where you want to be. The engine underneath is a verifiable loop: turn any request into testable criteria, then climb until they pass. This is the fir...

Red Hat Security Advisory 2026-55865-03

Red Hat Security Advisory 2026-55865-03 - An update for multiple packages is now available for Red Hat Enterprise Linux 9. Issues addressed include integer overflow, out of bounds read, and out of bounds write vulnerabilities...

Red Hat Security Advisory 2026-55740-03

Red Hat Security Advisory 2026-55740-03 - An update for pcp is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, code execution, denial of service, integer overflow, and privilege escalation vulnerabilities...

Cisco Secure Firewall Management Center Authentication Bypass / Remote Code Execution

Cisco Secure Firewall Management Center contains an authentication bypass vulnerability that can allow an unauthenticated remote attacker to access a startup-created machine session and ultimately execute code as root. This proof of concept implements the publicly documented attack chain, includi...

Red Hat Security Advisory 2026-56029-03

Red Hat Security Advisory 2026-56029-03 - An update for pipewire is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Issues addressed include a code execution vulnerability...

tcpreplay 4.6.1

tcpreplay is a BSD-style licensed tool to replay saved tcpdump files at arbitrary speeds. It provides a variety of features for replaying traffic for both passive sniffer devices as well as inline devices such as routers, firewalls, and intrusion detection systems. Many NIDSs fare poorly when...

Debian Security Advisory 6446-1

Debian Linux Security Advisory 6446-1 - A flaw was discovered in the UTF-16 decoding support of expat, an XML parsing C library, where low surrogates were treated in the same way as high surrogates. Parsing crafted XML input may result in an out-of-bounds read and a resultant infinite loop, leadi...

Red Hat Security Advisory 2026-55758-03

Red Hat Security Advisory 2026-55758-03 - An update for 389-ds-base is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Issues addressed include buffer overflow and null pointer vulnerabilities...

Red Hat Security Advisory 2026-56050-03

Red Hat Security Advisory 2026-56050-03 - An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 E4S for RHEL 9. Issues addressed include buffer overflow and null pointer vulnerabilities...

Red Hat Security Advisory 2026-55762-03

Red Hat Security Advisory 2026-55762-03 - An update for multiple packages is now available for Red Hat Enterprise Linux 8...

Red Hat Security Advisory 2026-55837-03

Red Hat Security Advisory 2026-55837-03 - An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions...

memdumper macOS EDR Process Attribution Evasion

memdumper is a macOS process memory inspection utility that injects a dynamic library into an existing signed binary possessing Apple debugger and DYLD-related entitlements. The injected library uses the entitled process to obtain a target task port, search or dump readable process memory, attach...

Red Hat Security Advisory 2026-55860-03

Red Hat Security Advisory 2026-55860-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Issues addressed include a denial of service vulnerability...

Wavestore VMS 6.48.809 Remote Code Execution

Wavestore VMS version 6.48.809 contains a command injection vulnerability in the venusd /simple/export endpoint. An authenticated remote attacker can inject shell metacharacters into the user parameter, which is URL-decoded and passed without sanitization to a command executed through popen...

Apple Security Advisory 08-17-2026-3

Apple Security Advisory 08-17-2026-3 - macOS Tahoe 26.6.2 addresses code execution, integer overflow, out of bounds access, out of bounds read, and use-after-free vulnerabilities...

Red Hat Security Advisory 2026-55618-03

Red Hat Security Advisory 2026-55618-03 - An update for kpatch-patch-6120-211161 is now available for Red Hat Enterprise Linux 10...

Apple Security Advisory 08-17-2026-2

Apple Security Advisory 08-17-2026-2 - iOS 18.7.10 and iPadOS 18.7.10 addresses buffer overflow, bypass, code execution, heap corruption, information leakage, integer overflow, out of bounds access, out of bounds read, out of bounds write, and use-after-free vulnerabilities...

slot2 Amazon Linux 2023 UEFI Bootkit

slot2 is a two-stage UEFI GRUB2 bootkit designed to establish a persistent pre-OS implant on Amazon Linux 2023 x8664 EC2 instances. It installs a custom GRUB EFI image and Unified Kernel Image, creates a UEFI NVRAM boot entry ahead of the stock Amazon entry, executes an implant with network and...

dyen macOS In-Memory Mach-O Loader

dyen is a macOS in-memory Mach-O dynamic library loader designed to execute a dylib using the stock Python interpreter without writing the decrypted Mach-O to disk or registering the payload with dyld. It supports encrypted standalone payloads and encrypted dylibs appended to otherwise valid cove...

Red Hat Security Advisory 2026-56133-03

Red Hat Security Advisory 2026-56133-03 - An update for attr is now available for Red Hat Enterprise Linux 8. Issues addressed include privilege escalation and traversal vulnerabilities...

AdaRare: Telemetry-Guided Joint Profile Control for Greybox Fuzzing

Greybox fuzzers combine interacting queue, mutation, dictionary, energy, and comparison-solving control surfaces, while prior adaptive systems typically optimize other decision objects or control layers. We present AdaRare, an AFL++ extension that coordinates five internal actuation mechanisms as...

Red Hat Security Advisory 2026-55801-03

Red Hat Security Advisory 2026-55801-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Issues addressed include denial of service and integer overflow vulnerabilities...

Red Hat Security Advisory 2026-55763-03

Red Hat Security Advisory 2026-55763-03 - An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9...

OpenZFS Linux Authorization Bypass / Memory Corruption

OpenZFS on Linux contains multiple authorization and parser flaws that can allow low-privileged container users to access host-pool operations, corrupt cross-tenant storage, trigger kernel memory corruption and denial of service, and, under demonstrated research conditions, escalate to a host uid...

Docmosis Tornado 2.11.3 Remote Code Execution

Docmosis Tornado version 2.11.3 contains an unauthenticated arbitrary file write vulnerability in the /api/render endpoint. A remote attacker can use the storeTo parameter with a file: destination to write rendered content to arbitrary new filesystem paths. When the service runs as root, a crafte...

Apple Security Advisory 08-17-2026-1

Apple Security Advisory 08-17-2026-1 - iOS 26.6.1 and iPadOS 26.6.1 addresses bypass, code execution, integer overflow, out of bounds access, out of bounds read, and use-after-free vulnerabilities...

Countersoft Gemini 7.3.0 SQL Injection / Remote Code Execution

Countersoft Gemini version 7.3.0 contains an authenticated SQL injection vulnerability in the custom field lookup functionality. An attacker with valid credentials can inject stacked SQL queries through the term parameter and, when the application uses a privileged SQL Server account, enable...

SureForms 2.1.2 Denial of Service

SureForms version 2.1.2 and below contains a denial of service vulnerability in its form submission functionality. A remote attacker can submit a large number of attacker-controlled key-value pairs containing oversized content, resulting in resource exhaustion and temporarily preventing...

Red Hat Security Advisory 2026-55784-03

Red Hat Security Advisory 2026-55784-03 - An update for unbound is now available for Red Hat Enterprise Linux 8...

When Agents Act on Web3: An Attack-Surface Survey of MCP, Skills, and Tool Calling

AI agents increasingly act rather than merely read: across the Model Context Protocol MCP ecosystem, the share of deployed tools that modify external state has risen from 27% to 65% of tool use. When agents exercise this authority on public blockchains through MCP, skills, and tool calling, the...

ADAPTD: Adaptive Detection and Proactive Threat Defense for Autonomous APT Attacks

Advanced persistent threat APT actors increasingly employ sophisticated techniques to propagate laterally through segmented enterprise networks. Timely detection and defense depend on cross-subnetwork coordination, yet maintaining global situational awareness generates substantial communication...

Beyond the Hype: Evaluating LLM Integration and Practical Limitations in Security Operation Centers

Large Language Models LLMs are increasingly being explored within Security Operation Centers SOCs to support text-heavy analytical work such as alert contextualization, incident summarization, and drafting investigative artifacts. Despite this interest, practitioners describe critical operational...

openSUSE Security Advisory - openSUSE-SU-2026:11528-1

openSUSE Security Advisory - These are all security issues fixed in the wasm-bindgen-0.2.100-2.1 package on the GA media of openSUSE Tumbleweed...

Ghost CMS 6.19.0 Content API SQL Injection

Ghost CMS versions 3.24.0 through 6.19.0 contain an unauthenticated SQL injection vulnerability in the Content API that can allow a remote attacker to read arbitrary information from the application's database. This proof of concept automatically discovers the Content API key and endpoint, uses...

uproot 5.7.4 TStreamerInfo Code Injection

uproot version 5.7.4 and prior contain a code injection vulnerability in the handling of ROOT TStreamerInfo metadata where attacker-controlled streamer fields are incorporated into dynamically generated Python source without sufficient quoting. A malicious ROOT file can therefore cause arbitrary...

WordPress Events Manager 7.4 Unauthenticated Administrator Privilege Escalation

WordPress Events Manager versions 7.4 and below contain an unauthenticated privilege escalation vulnerability caused by improper capability mapping for event and location post identifiers. An unauthenticated attacker can exploit a collision between a WordPress user ID and an Events Manager post I...

Metabase Authentication Bypass / SQL Injection

Metabase versions x.58.0 through x.63.4 contain an unauthenticated SQL injection vulnerability in the password reset functionality that can allow a remote attacker to manipulate database queries and obtain administrator access. This proof of concept exploits the vulnerable password reset endpoint...

Security of Foundation-Model-Powered Embodied Agents: Attack Surfaces, Attacks, Defenses, and Evaluation

Foundation models are increasingly used for perception, reasoning, planning, and action generation in embodied agents, creating security risks that can propagate from digital inputs to physical behavior. Existing surveys often organize threats by mechanisms such as jailbreaks, prompt injection,...

AI across the Intrusion Lifecycle

Gambit has investigated three unrelated threat actors that illustrate how attackers are incorporating AI into real-world intrusions and the roles AI systems now play during offensive operations...

SUSE Security Advisory - SUSE-SU-2026:3628-1

SUSE Security Advisory - This update for texlive fixes the following issues. NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. Use-after-free in synctexparser.c in TeX Live...

openSUSE Security Advisory - openSUSE-SU-2026:11523-1

openSUSE Security Advisory - These are all security issues fixed in the python313-h2-4.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

Quantum-Safe Web Service Architecture Using Time-Based One-Time Passwords

One-Time Passwords OTPs have become a common option for multi-factor authentication in several applications. For instance, during website login processes, OTPs are often used in conjunction with traditional text-based usernames and passwords to verify whether the access request originates from a...

7-Zip 26.01 XZ Decoder Heap Buffer Overflow

7-Zip 26.01 contains a heap buffer overflow vulnerability in the XZ decoder that can be triggered while processing a specially crafted XZ archive. This proof of concept generates a malformed XZ file designed to reproduce the crash condition in the vulnerable multi-threaded XZ decompression path...