The CPE should be the following https://cpe.gcve.eu/products/247ca129-a593-5b5c-bca8-d120330743ad cpe:2.3:a:realtek:jungle_sdk:*:*:*:*:*:*:*:*

[https://arxiv.org/abs/2504.17473](https://arxiv.org/abs/2504.17473) The digital economy runs on Open Source Software (OSS), with an estimated 90\% of modern applications containing open-source components. While this widespread adoption has revolutionized software development, it has also created critical security vulnerabilities, particularly in essential but under-resourced projects. This paper examines a sophisticated attack on the XZ Utils project (CVE-2024-3094), where attackers exploited …

For more details [https://security.paloaltonetworks.com/CVE-2026-0300](https://security.paloaltonetworks.com/CVE-2026-0300)

# Bleeding Llama: Critical Unauthenticated Memory Leak in Ollama | Cyera Research TL;DR ----- Ref: [https://www.cyera.com/research/bleeding-llama-critical-unauthenticated-memory-leak-in-ollama](https://www.cyera.com/research/bleeding-llama-critical-unauthenticated-memory-leak-in-ollama) We discovered a critical vulnerability (CVE-2026–7482, CVSS 9.1) in Ollama that enables unauthenticated attackers to leak the entire Ollama process memory, potentially impacting **300,000** servers globally. …

[Original blog post](https://blog.feistel.party/2026/04/30/deny-alg-socket-to-containers-with-selinux-to-mitigate-cve-2026-31431.html) # Deny alg_socket to Containers with SELinux to Mitigate CVE‑2026‑31431 | Blog•Feistel•Party [CVE-2026-31431 or “Copy Fail”](https://xint.io/blog/copy-fail-linux-distributions) is a bug in the Linux kernel’s implementation of the AF\_ALG socket type that exposes the kernel’s crypto subsystem to unprivileged userspace. Because most applications don’t use this and…

https://github.com/microsoft/WSL/issues/40365

# Kernel module (without reboot) If your system use dynamic loading of kernel module, the following can be done: `rmmod algif_aead` to ensure that the module is not loaded Create and edit the file `/etc/modprobe.d/disable-algif.conf` and add `install algif_aead /bin/false` # Kernel with algif_aead (such as RedHat) Based on the following [https://csirt.egi.eu/2026/04/30/critical-vulnerability-in-linux-kernel/](https://csirt.egi.eu/2026/04/30/critical-vulnerability-in-linux-kernel/) referen…

This article provides the known indicators of compromise (IOCs) associated with malicious software c05d5254 and related activity, and actions to take if IOCs are discovered. https://my.f5.com/manage/s/article/K000160486

For more details -> https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/ which includes ~~~python import base64 import requests import urllib3 urllib3.disable_warnings() BANNER = """ __ ___ ___________ __ _ ______ _/ |__ ____ | |_\\__ ____\\____ _ ________ \\ \\/ \\/ \\__ \\ ___/ ___\\| | \\| | / _ \\ \\/ \\/ \\_ __ \\ \\ / / __ \\| | \\ \\___| …

🚨Citrix NetScaler CVE-2026-3055 is being actively exploited in the wild Attackers send crafted SAMLRequest payloads to /saml/login omitting the AssertionConsumerServiceURL field, triggering the appliance to leak memory contents via the NSC_TASS cookie. Our honeypot data shows exploitation activity from the same payload structure as the @watchtowrcyber PoC. Track exploitation of our Citrix honeypots 👉 https://console.defusedcyber.com/capabilities https://x.com/defusedcyber/status/2038266…

Reference: https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc Overview Published: July 2, 2026 Version: 1.0 Revision: 1.0 Summary 1 of 25 A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device. Affected Products: UniFi Connect Application (Version 3.4.16 and earlier) Mitigation: Update your …

# CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) Well, well, well - once again, the cat has dragged us in and spat us out. Today, we find ourselves questioning the reality we sit within. Must it be so predictable, and why us? “But watchTowr, what do you mean?” Well, if you’re here, you likely fit into one of the following categories: * A dear reader, * A group therapy accomplice * A Groundhog Day fan club member Why? Because we once again …

# WARNING: Remote Code Execution and Cross-Site Scripting in pgAdmin 4 Can Be Exploited to Execute Arbitrary Commands and Exfiltrate Database Credentials. Patch Immediately! | CCB Belgium Reference: https://ccb.belgium.be/advisories/warning-remote-code-execution-and-cross-site-scripting-pgadmin-4-can-be-exploited Published : 22/06/2026 > * **Last update**: 22/06/2026 > * **Affected software:** pgAdmin 4 prior to version 9.16 > * **Type**: > → **CWE-306**: Missing Authe…

| CVE Number | Description | CVSS Score (Severity) | CVSS Vector | CWE | | -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------…

NEWS for rsync 3.4.3 (20 May 2026) Changes in this version: SECURITY FIXES: Six CVEs are fixed in this release. All six are assigned by VulnCheck as CNA. Affected versions are 3.4.2 and earlier in every case. Three of the six (CVE-2026-29518, CVE-2026-43617, CVE-2026-43619) require non-default daemon configuration to reach: the first and third need use chroot = no for a module, the second needs daemon chroot = ... set in rsyncd.conf. Two (CVE-2026-43618, CVE-2026-43620) are reachable from a nor…

=========================================================== == Subject: Unauthenticated Remote Code Execution == in Samba printing subsystem == == CVE ID#: CVE-2026-4480 == == Versions: All versions == == Summary: Samba print servers with a "print command" == that has the %J substitution character == are vulnerable to a Remote Code Execution =========================================================== =========== Description =========== Samba passes the client-controlled job d…

Package : samba CVE ID : CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-3238 CVE-2026-4408 CVE-2026-4480 Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix, which might result in bypass of access checks, overwrite of files in unintended situations using the WORM vfs module, installing CA certificates over http without verification when auto-enrollment GPO is enabled, denial of service or remote code execut…

# About the security content of iOS 26.5 and iPadOS 26.5 - Apple Support For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the [Apple security releases](https://support.apple.com/en-us/100100) page. Apple security documents reference vulnerabilities by [CVE-ID](https://www.cve.org/About/Overview) when possible. For more information about security, se…

# About the security content of macOS Tahoe 26.5 - Apple Support For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the [Apple security releases](https://support.apple.com/en-us/100100) page. Apple security documents reference vulnerabilities by [CVE-ID](https://www.cve.org/About/Overview) when possible. For more information about security, see the [A…

[https://download.samba.org/pub/rsync/NEWS.html](https://download.samba.org/pub/rsync/NEWS.html) SECURITY FIXES: Six CVEs are fixed in this release. All six are assigned by VulnCheck as CNA. Affected versions are 3.4.2 and earlier in every case. Three of the six (CVE-2026-29518, CVE-2026-43617, CVE-2026-43619) require non-default daemon configuration to reach: the first and third need use chroot = no for a module, the second needs daemon chroot = ... set in rsyncd.conf. Two (CVE-2026-43618, CVE…