Aggregator

Government agencies with smaller budgets need support — and here's how you can help.

A vulnerability classified as very critical was found in Imagination Graphics DDK up to 1.18 RTM1/23.2 RTM1/24.2 RTM2/25.3 RTM/26.1 RTM1. Affected is an unknown function. Executing a manipulation can lead to out-of-bounds read. This vulnerability is registered as CVE-2026-45201. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability classified as very critical has been found in Imagination Graphics DDK up to 1.18 RTM2/23.2 RTM2/24.2 RTM2/25.3 RTM/26.1 RTM1. This impacts an unknown function of the component Memory Free Paths. Performing a manipulation results in double free. This vulnerability is cataloged as CVE-2026-45202. The attack must be initiated from a local position. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability described as very critical has been identified in Imagination Graphics DDK up to 26.1 RTM1. This affects an unknown function of the component GPU Firmware. Such manipulation leads to memory corruption. This vulnerability is listed as CVE-2026-45199. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in WPForms Pro Plugin up to 2.0.0.2 on WordPress. The impacted element is the function wp_kses_allowed_html of the file view-entry.min.js of the component Input Sanitization. This manipulation of the argument data-src causes cross site scripting. This vulnerability is tracked as CVE-2026-18409. The attack is possible to be carried out remotely. No exploit exists.

Name: AEROSPACE VILLAGE STARPWN CTF (an Starpwn CTF event.)
Date: Aug. 6, 2026, 5 p.m. — 09 Aug. 2026, 18:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://starpwn.ctfd.io/
Rating weight: 24.65
Event organizers: Visionspace

Name: RoboHack AI CTF (Robotic Hacking Community at DEFCON 34) (an RoboHack AI CTF event.)
Date: Aug. 7, 2026, midnight — 09 Aug. 2026, 00:00 UTC  [add to calendar]
Format: Hack quest
On-line
Location: DEFCON 34, Las Vegas, Nevada, USA
Offical URL: https://www.robotichackingcommunity.com/
Rating weight: 0
Event organizers: robotichackingcommunity

Name: DEF CON CTF 2026 (an DEF CON CTF event.)
Date: Aug. 7, 2026, 4 p.m. — 09 Aug. 2026, 19:00 UTC  [add to calendar]
Format: Attack-Defense
On-site
Location: Las Vegas, Nevada, USA
Offical URL: https://bbbirds.org/
Rating weight: 0.00
Event organizers: Benevolent Bureau of Birds

Name: UIUCTF 2026 (an UIUCTF event.)
Date: Aug. 8, 2026, midnight — 10 Aug. 2026, 00:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://uiuc.tf/
Rating weight: 69.35
Event organizers: SIGPwny

Name: scriptCTF 2026 (an scriptCTF event.)
Date: Aug. 8, 2026, midnight — 10 Aug. 2026, 00:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.scriptsorcerers.xyz/
Rating weight: 24.70
Event organizers: ScriptSorcerers

Name: The heart of Sysola (an The heart of sysola event.)
Date: Aug. 8, 2026, 1 p.m. — 09 Aug. 2026, 01:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://caplag.ru/competitions/the-heart-of-sysola
Rating weight: 0.00
Event organizers: Caplag

Name: EYCC CTF 2026 Finals (an EYCC CTF event.)
Date: Aug. 13, 2026, 6 a.m. — 13 Aug. 2026, 16:00 UTC  [add to calendar]
Format: Jeopardy
On-site
Location: Egypt
Offical URL: https://eycc.stemeghackclub.org/
Rating weight: 0
Event organizers: Mont5ab El2hwa

Name: Thryve CTF 2026 (an Thryve CTF event.)
Date: Aug. 14, 2026, 11 a.m. — 14 Aug. 2026, 20:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.thryvectf.org/
Rating weight: 0
Event organizers: Thryve

Name: gaslightCTF 2026 (an gaslightCTF event.)
Date: Aug. 14, 2026, noon — 17 Aug. 2026, 12:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://gaslightctf.cooking/
Rating weight: 0
Event organizers: gaslighting

Name: HackHowl 2026 (an HackHowl event.)
Date: Aug. 15, 2026, midnight — 17 Aug. 2026, 05:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://hackhowl.com/
Rating weight: 0.00
Event organizers: Hack Howl

Name: THJCC CTF 2026 summer (an THJCC CTF event.)
Date: Aug. 15, 2026, midnight — 16 Aug. 2026, 12:00 UTC  [add to calendar]
Format: Jeopardy
On-site
Offical URL: https://ctf2026-sum.thjcc.org/
Rating weight: 0.00
Event organizers: CakeisTheFake

Name: Trace Athena OSINT CTF (an Trace Athena OSINT CTF event.)
Date: Aug. 15, 2026, 3:30 a.m. — 15 Aug. 2026, 18:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Location: On-line
Offical URL: https://trace.athena-ctf.com/
Rating weight: 0
Event organizers: Athena-CTF

Name: 0xV01D CTF 2026 V2 (an 0xV01D CTF event.)
Date: Aug. 15, 2026, 7:30 a.m. — 16 Aug. 2026, 07:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://0xv01d-ctf.xyz/
Rating weight: 0
Event organizers: OxV01D

Name: CTFZone 2026 (an CTFZone event.)
Date: Aug. 19, 2026, 8 a.m. — 19 Aug. 2026, 16:00 UTC  [add to calendar]
Format: Jeopardy
On-site
Location: Russia, Moscow
Offical URL: https://board.ctfz.zone/
Rating weight: 0
Event organizers: BIZone

A vulnerability labeled as critical has been found in Rocket.Chat up to 7.10.14/8.7.0. The affected element is the function dangerouslySetInnerHTML of the file InquireSidePanelItem.tsx of the component Omnichannel Queue. The manipulation of the argument Name results in injection. This vulnerability is identified as CVE-2026-65644. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.