Coverage tagged "Vulnerability".
Posted by Lukasz Lenart on Oct 05 Severity: moderate Affected versions: - Apache Struts 2.5.14 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts 7.0.0 through 7.3.0 Description…
Posted by Lukasz Lenart on Oct 05 Severity: moderate Affected versions: - Apache Struts 2.0.0 through 2.3.37 - Apache Struts 2.5.0 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts…
Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments but claimed the problem was not connected to vulnerabilities…
Chen YuXiang discovered that OpenStack Aodh did not correctly enforce project scoping in its alarm list API and that the OpenStack Watcher webhook trigger endpoint did not apply authorization. An…
Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible.
ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices
Serial number: AV26-997 Date: October 5, 2026 As of September 29, 2026, IBM is affected by vulnerabilities in the following products: DataStage on Cloud Pak for Data Version 5.4.0.0 Guardium Data…
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling. "Cling…
It was discovered that the Ceph Object Gateway (RGW) SigV4 handler did not reject requests carrying x-amz-* headers that were absent from the signed header set. An attacker holding a presigned URL…
arXiv:2610.02349v1 Announce Type: new Abstract: Inter-agent communication is central to Large Language Model Multi-Agent Systems (LLM-MAS), but it introduces an underexplored vulnerability…
arXiv:2610.02544v1 Announce Type: new Abstract: The increasing sophistication of Hardware Trojans (HTs) and system-level vulnerabilities poses significant risks to modern integrated circuits…
arXiv:2610.02805v1 Announce Type: new Abstract: Threshold signature schemes play a vital role in securing digital assets within blockchain and distributed systems. FROST2 stands out as a practical…
arXiv:2610.03014v1 Announce Type: new Abstract: Large language model (LLM)-based agents increasingly connect model-generated decisions to security-sensitive software capabilities such as command…
arXiv:2610.03153v1 Announce Type: new Abstract: Workspace agents combine large language models with execution harnesses to perform stateful, multi-step tasks that access or modify external resources…
Posted by Jan Schaumann on Oct 04 Hello, I was wondering whether it might make sense to establish a disclosure list for cloud computing / virtual private server hosting providers. The reason that I…
Posted by Jens Geyer on Oct 04 Apache Thrift 0.25.0 was released on 30 September 2026: https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1 It fixes the 61 vulnerabilities listed below…
Zack Whittaker reports: Epic, the software technology giant that makes the widely used MyChart software for accessing patients’ medical data, has paused most of its product development as the company…
The bugs could lead to authentication bypass, shell command execution, and memory corruption.
Posted by Emmanuel Lécharny on Oct 02 Severity: important Affected versions: - Apache Directory LDAP API 2.1.0 before 2.1.9 Description: Asymmetric Resource Consumption vulnerability in Apache…
Posted by Emmanuel Lécharny on Oct 02 Severity: important Affected versions: - Apache Directory LDAP API 2.1.0 before 2.1.9 Description: Asymmetric Resource Consumption vulnerability in Apache…
