The CPE should be the following https://cpe.gcve.eu/products/247ca129-a593-5b5c-bca8-d120330743ad cpe:2.3:a:realtek:jungle_sdk:*:*:*:*:*:*:*:*

Note: If MISP.disableUserSelfManagement is enabled on the instance, non-admin users can not use the vulnerable endpoint. Admins = org admins or site admins

[https://arxiv.org/abs/2504.17473](https://arxiv.org/abs/2504.17473) The digital economy runs on Open Source Software (OSS), with an estimated 90\% of modern applications containing open-source components. While this widespread adoption has revolutionized software development, it has also created critical security vulnerabilities, particularly in essential but under-resourced projects. This paper examines a sophisticated attack on the XZ Utils project (CVE-2024-3094), where attackers exploited …

For more details [https://security.paloaltonetworks.com/CVE-2026-0300](https://security.paloaltonetworks.com/CVE-2026-0300)

# Bleeding Llama: Critical Unauthenticated Memory Leak in Ollama | Cyera Research TL;DR ----- Ref: [https://www.cyera.com/research/bleeding-llama-critical-unauthenticated-memory-leak-in-ollama](https://www.cyera.com/research/bleeding-llama-critical-unauthenticated-memory-leak-in-ollama) We discovered a critical vulnerability (CVE-2026–7482, CVSS 9.1) in Ollama that enables unauthenticated attackers to leak the entire Ollama process memory, potentially impacting **300,000** servers globally. …

[Original blog post](https://blog.feistel.party/2026/04/30/deny-alg-socket-to-containers-with-selinux-to-mitigate-cve-2026-31431.html) # Deny alg_socket to Containers with SELinux to Mitigate CVE‑2026‑31431 | Blog•Feistel•Party [CVE-2026-31431 or “Copy Fail”](https://xint.io/blog/copy-fail-linux-distributions) is a bug in the Linux kernel’s implementation of the AF\_ALG socket type that exposes the kernel’s crypto subsystem to unprivileged userspace. Because most applications don’t use this and…

https://github.com/microsoft/WSL/issues/40365

# Kernel module (without reboot) If your system use dynamic loading of kernel module, the following can be done: `rmmod algif_aead` to ensure that the module is not loaded Create and edit the file `/etc/modprobe.d/disable-algif.conf` and add `install algif_aead /bin/false` # Kernel with algif_aead (such as RedHat) Based on the following [https://csirt.egi.eu/2026/04/30/critical-vulnerability-in-linux-kernel/](https://csirt.egi.eu/2026/04/30/critical-vulnerability-in-linux-kernel/) referen…

This article provides the known indicators of compromise (IOCs) associated with malicious software c05d5254 and related activity, and actions to take if IOCs are discovered. https://my.f5.com/manage/s/article/K000160486

For more details -> https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/ which includes ~~~python import base64 import requests import urllib3 urllib3.disable_warnings() BANNER = """ __ ___ ___________ __ _ ______ _/ |__ ____ | |_\\__ ____\\____ _ ________ \\ \\/ \\/ \\__ \\ ___/ ___\\| | \\| | / _ \\ \\/ \\/ \\_ __ \\ \\ / / __ \\| | \\ \\___| …