Vulnerabilities
Signal RingRTC CWE-754 Flaw Lets Attackers Flood FSM Queue to Stop A/V Tracks
A critical flaw in Signal's RingRTC library allows peers to saturate queues, preventing local hangups from tearing down audio and video tracks.
NVD
Everything NetSec Observer has reported about NVD: 8 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Pillow Morphology Zero-Width Image Crash CVE-2026-112397 Patched in v13.0.0
A flaw in Pillow versions prior to 13.0.0 allows zero-width images to trigger memory errors and crashes via morphology operations.
Vulnerabilities
Pillow Image Library Fixes High-Severity Double-Free Memory Flaw
A memory corruption bug in older Pillow versions allows attackers to crash processes by triggering selective allocation failures during image transformations.
Vulnerabilities
Dokku Command Injection via Docker Options Plugin in Pre-0.38.25 Builds
Attackers with app-level access can execute arbitrary commands on the host by injecting shell syntax into Docker configuration strings processed by Bash.
Vulnerabilities
Grav Login OAuth Plugin Uses Weak MD5 Passwords for OAuth Users
Unauthenticated attackers can guess credentials for Grav Login OAuth accounts and seize admin control due to predictable username and password generation.
Vulnerabilities
OpenSpug Critical RCE: Unauth OS Command Injection in File Transfer Affects v3.0-4.0.1 With No Fix
A critical remote code execution vulnerability in OpenSpug's file transfer module allows unauthenticated attackers to inject operating system commands.
Vulnerabilities
WineShop PHP Object Injection in v3.20 Enables Unauthenticated Code Execution with 9.8 CVSS Score
A critical vulnerability in WineShop versions up to 3.20 allows attackers to execute arbitrary code without authentication, rated 9.8 CVSS.
Vulnerabilities
Azure API Center Sensitive Info Exposure Vulnerability CVE-2026-83943 Scored 8.7 CVSS
Microsoft rates CVE-2026-83943 as high severity with an 8.7 CVSS score, warning that unauthorized actors can disclose sensitive information over a network.