Aggregator

A vulnerability, which was classified as problematic, has been found in openlink virtuoso-opensource 7.2.11. This affects an unknown function. The manipulation leads to denial of service. This vulnerability is listed as CVE-2025-61027. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as problematic, was found in openlink virtuoso-opensource 7.2.11. This impacts an unknown function. The manipulation results in denial of service. This vulnerability is cataloged as CVE-2025-61028. The attack may be launched remotely. There is no exploit available.

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious payload that remains invisible to security scanners, AI agents, and human reviewers. [...]

Взломщики делают ставку на тишину, а не на грубую силу.

BBC 宣布于 6 月 27 日停播 Radio 4 长波广播，6 月 30 日关闭长波平台。BBC 将此归咎于维护过时技术的成本过高。Radio 4 长波设备使用的电子管早就停产，而 BBC 早在 1997 年就将相关信号塔出售给了私营公司，这些设备由私营公司运营。随着越来越多的人转向流媒体，维持全国性的广播和电视覆盖在经济上意义不大。在关闭长波之后，英国接着准备淘汰地面电视，相比使用人数很少的长波，地面电视的关闭将会影响很多人。英国政府计划最早 2034 年最晚 2044 年关闭地面电视。

A vulnerability was found in skypilot-org skypilot up to 0.12.0. It has been declared as problematic. Impacted is the function username.encode of the file sky/users/server.py of the component User ID Handler. The manipulation results in use of weak hash. This vulnerability was named CVE-2026-13482. The attack may be performed from remote. In addition, an exploit is available. The vendor was contacted early about this disclosure.

A vulnerability classified as critical has been found in ImageMagick up to 7.1.2-14. Affected by this vulnerability is an unknown functionality of the component Image File Handler. This manipulation causes use after free. The identification of this vulnerability is CVE-2026-56376. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in ImageMagick up to 7.1.2-14. It has been classified as critical. The affected element is an unknown function of the component SVG Decoder. This manipulation causes escaping of output. This vulnerability is registered as CVE-2026-56379. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in ImageMagick up to 7.1.2-14. It has been rated as problematic. This affects an unknown function of the file coders/txt.c of the component TXT File Handler. Performing a manipulation of the argument texture results in memory leak. This vulnerability is reported as CVE-2026-56371. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability marked as critical has been reported in Flowise up to 3.0.x. Affected by this issue is some unknown functionality of the file httpSecurity.ts of the component HTTP Request Handler. This manipulation causes server-side request forgery. This vulnerability is handled as CVE-2026-56275. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in Eclipse Open VSX up to 0.34.0 and classified as problematic. This affects an unknown function of the component SVG File Handler. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2026-4983. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in n8n-io n8n up to 2.23.x. Impacted is an unknown function. Executing a manipulation of the argument table can lead to improperly controlled modification of object prototype attributes. This vulnerability is handled as CVE-2026-54312. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in n8n-io n8n up to 2.23.x. It has been rated as problematic. The affected element is an unknown function of the component Content-Security-Policy Handler. Performing a manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2026-54303. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in n8n-io n8n up to 2.25.6/2.26.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component MCP Endpoint. This manipulation causes missing authentication. This vulnerability is tracked as CVE-2026-54309. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability categorized as critical has been discovered in n8n-io n8n up to 2.25.6/2.26.1. This affects an unknown part of the component Parameter Handler. Such manipulation leads to sql injection. This vulnerability is listed as CVE-2026-54310. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in n8n-io n8n up to 2.25.6/2.26.1. This vulnerability affects unknown code. Performing a manipulation results in exposure of data element to wrong session. This vulnerability is cataloged as CVE-2026-54311. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, was found in OpenSSH. The impacted element is an unknown function. Executing a manipulation can lead to improper restriction of communication channel to intended endpoints. This vulnerability appears as CVE-2026-55655. The attack requires local access. There is no available exploit.

Submit #789927 / VDB-374479

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. This issue affects the function device_add_disk of the file /sys/bus/rbd/add_single_major of the component rbd. Executing a manipulation can lead to null pointer dereference. The identification of this vulnerability is CVE-2026-46079. The attack needs to be done within the local network. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.139/6.12.87/6.18.29/7.0.6/7.1-rc1. It has been rated as critical. Impacted is the function stmmac_rx of the component net. Performing a manipulation results in uncontrolled memory allocation. This vulnerability was named CVE-2026-46110. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is advised.