CVE ID :CVE-2026-58053 Published : June 28, 2026, 1:32 a.m. | 18 hours, 27 minutes ago Description :Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow’s container.options string to the Docker job container’s HostConfig and, when configured with privileged:…
CVE ID :CVE-2026-58051 Published : June 28, 2026, 1:32 a.m. | 18 hours, 27 minutes ago Description :libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the…
CVE ID :CVE-2026-58050 Published : June 28, 2026, 1:32 a.m. | 18 hours, 27 minutes ago Description :libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_attribute) without bounds checking,…
CVE ID :CVE-2026-58049 Published : June 28, 2026, 1:32 a.m. | 18 hours, 27 minutes ago Description :FFmpeg’s RASC video decoder (decode_dlta in libavcodec) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA…
The Security Service of Ukraine (SSU) said it, together with the U.S. Federal Bureau of Investigation (FBI), uncovered a long-running campaign orchestrated by Russian intelligence services to break into the messaging accounts of government officials, military personnel, politicians, and activists…
OpenAI on Friday released three versions of GPT-5.6, called Sol, Terra, and Luna, as a limited preview to a small number of companies as part of an ongoing engagement with the U.S. government. While Sol is the latest flagship model…
CVE ID :CVE-2026-12415 Published : June 27, 2026, 4:30 a.m. | 15 hours, 22 minutes ago Description :The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the pravel_invoice_edit_account() AJAX action in versions up…
CVE ID :CVE-2026-56414 Published : June 26, 2026, 11 p.m. | 20 hours, 52 minutes ago Description :A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating…
CVE ID :CVE-2026-55975 Published : June 26, 2026, 10:58 p.m. | 20 hours, 54 minutes ago Description :A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to the device’s certificate generation interface, which…
The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, and the operators have added a step: they now coax targets into handing over their Signal Backup Recovery Key. Hand it over once, and the attacker can…