Aggregator

Сигналу к легендарному зонду уже требуется больше 22 часов, но аппарат 1977 года продолжает присылать данные из межзвездного пространства.

A vulnerability was found in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen up to 4.1.5. It has been declared as problematic. The affected element is an unknown function. Such manipulation leads to improper null termination. This vulnerability is uniquely identified as CVE-2026-12386. Local access is required to approach this attack. No exploit exists.

A vulnerability was found in TUBITAK BILGEM Software Technologies Research Institute Pardus Domain Joiner up to 0.5.3. It has been classified as problematic. Impacted is an unknown function. This manipulation causes information disclosure. This vulnerability is handled as CVE-2026-12250. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in TUBITAK BILGEM Software Technologies Research Institute Pardus Update up to 0.6.5 and classified as very critical. This issue affects some unknown processing. The manipulation results in missing authentication. This vulnerability is known as CVE-2026-6509. Attacking locally is a requirement. No exploit is available.

微软显然在将利润转移到低企业税国家。早在 2005 年，微软时任 CEO 巴尔默(Steve Ballmer)称低企业税率是在爱尔兰做生意的整体优势之一。微软和其它跨国企业一样，会利用子公司来转移利润以降税。微软子公司的纳税金额有明显的模式：低税国家高利润，高税国家低利润。微软在爱尔兰的员工占到了全球员工的 3%，但它产生了近 40% 的税前收入；而在欧洲最大的经济体德国，德国子公司的利润仅占全球利润的不到 0.5%。微软在卢森堡的税前收入为 2.83 亿美元，但在该国仅仅只有 34 名员工。美国国税局（IRS）正寻求微软补税近 290 亿美元。微软官方篇博客称税收“是衡量贡献的一个重要指标，但不是唯一的指标”。

A vulnerability has been found in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control up to 0.6.x and classified as critical. This vulnerability affects unknown code. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2026-9085. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.c of the component Media File Handler. Executing a manipulation can lead to null pointer dereference. This vulnerability appears as CVE-2026-14790. The attack requires local access. In addition, an exploit is available. A patch should be applied to remediate this issue. The project explains: "I would consider most of these more as bugs than vulns but anyway they're good to fix".

A vulnerability, which was classified as problematic, has been found in radareorg radare2 up to 6.1.6. Affected by this issue is some unknown functionality of the file libr/bin/format/mdmp/mdmp.c of the component Memory64ListStream Parser. Performing a manipulation results in stack-based buffer overflow. This vulnerability is reported as CVE-2026-14789. The attack requires a local approach. Moreover, an exploit is present. It is suggested to install a patch to address this issue.

A vulnerability classified as problematic was found in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the function r_core_bin_load of the file libr/core/cfile.c. Such manipulation leads to use after free. This vulnerability is documented as CVE-2026-14788. The attack needs to be performed locally. Additionally, an exploit exists. Applying a patch is advised to resolve this issue.

A vulnerability classified as problematic has been found in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/core/cmd_print.inc of the component pb Print Command Handler. This manipulation causes integer overflow. This vulnerability is registered as CVE-2026-14787. The attack needs to be launched locally. Furthermore, an exploit is available. It is recommended to apply a patch to fix this issue.

A vulnerability described as problematic has been identified in radareorg radare2 up to 6.1.6. This impacts the function r_str_word_get0set of the file libr/util/str.c. The manipulation results in integer overflow. This vulnerability is cataloged as CVE-2026-14786. The attack must be initiated from a local position. Furthermore, there is an exploit available. It is best practice to apply a patch to resolve this issue.

Submit #850391 / VDB-376379

Submit #850389 / VDB-376378

Submit #850388 / VDB-376377

Submit #850387 / VDB-376376

Submit #850386 / VDB-376375

A newly released open-source security framework called T3MP3ST is turning general-purpose AI coding agents like Claude Code, OpenAI’s Codex, and Hermes into autonomous red-teaming operators without requiring new API keys, cloud infrastructure, or additional billing. Built by researcher elder-plinius, T3MP3ST acts as a multi-agent orchestration layer rather than shipping its own model, coordinating multiple agent […]

The post T3MP3ST Security Framework With 35 Tools, Turns AI Coding Agents Into 0-Day Bug Hunters appeared first on Cyber Security News.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

Роковая ошибка судей в Дели подставит под удар журналистов и активистов ради спасения прибылей корпораций.

ReactOS 是一个致力于开发与 Windows NT 和 Windows 2000 应用程序和硬件驱动程序兼容的开源操作系统项目，至今已有逾三十年历史。该项目宣布了在游戏运行上的重大进展：六月初 ReactOS 宣布它能成功运行经典射击游戏《Half-Life》，仅仅过了一个月它宣布能成功进行《Half-Life 2》。这次演示是在一台搭载 NVIDIA GeForce 8400GS 显卡的 Intel Sandy Bridge 台式机上进行的。GeForce 8400GS GPU 是在 2007 年推出的，而 Sandy Bridge CPU 是在 2011 年发布的。