265 results for code

bing.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Executionhttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85e5e3c34640d2bc0a2c8a1b78d5ae&url=https%3a%2f%2fthehackernews.com%2f2026%2f08%2fnew-wordpress-pre-auth-xss-could-lead.html&c=3515810467473466422&mkt=en-usWordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.
Aug 7, 2026 5:56 AM
bing.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Executionhttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85e5e301e54b6dbc904ff88087036b&url=https%3a%2f%2fthehackernews.com%2f2026%2f08%2fnew-wordpress-pre-auth-xss-could-lead.html&c=3515810467473466422&mkt=en-usWordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.
Aug 7, 2026 5:56 AM
bing.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Executionhttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85e80b86fb43c9af93927a4f09fe7b&url=https%3a%2f%2fthehackernews.com%2f2026%2f08%2fnew-wordpress-pre-auth-xss-could-lead.html&c=3515810467473466422&mkt=en-usWordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.
Aug 7, 2026 5:56 AM
bing.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Executionhttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ce9ffb934879ac6eaca8705f45c9&url=https%3a%2f%2fthehackernews.com%2f2026%2f08%2fnew-wordpress-pre-auth-xss-could-lead.html&c=3515810467473466422&mkt=en-usWordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.
Aug 7, 2026 5:56 AM
bing.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Executionhttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85cea012d74f23ba937d5c70eaadb1&url=https%3a%2f%2fthehackernews.com%2f2026%2f08%2fnew-wordpress-pre-auth-xss-could-lead.html&c=3515810467473466422&mkt=en-usWordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.
Aug 7, 2026 5:56 AM
bing.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Executionhttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85e3c00aab4ef880236e9b6c876eb9&url=https%3a%2f%2fthehackernews.com%2f2026%2f08%2fnew-wordpress-pre-auth-xss-could-lead.html&c=3515810467473466422&mkt=en-usWordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.
Aug 7, 2026 5:56 AM
bing.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Executionhttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85cc9e1e754722ac21dbcf52979fbb&url=https%3a%2f%2fthehackernews.com%2f2026%2f08%2fnew-wordpress-pre-auth-xss-could-lead.html&c=3515810467473466422&mkt=en-usWordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.
Aug 7, 2026 5:56 AM
bing.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Executionhttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85d0c604154fd5ae0a3b770e19344b&url=https%3a%2f%2fthehackernews.com%2f2026%2f08%2fnew-wordpress-pre-auth-xss-could-lead.html&c=3515810467473466422&mkt=en-usWordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.
Aug 7, 2026 5:56 AM
bing.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Executionhttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85d0c6f6bc4939a57e253d568acf67&url=https%3a%2f%2fthehackernews.com%2f2026%2f08%2fnew-wordpress-pre-auth-xss-could-lead.html&c=3515810467473466422&mkt=en-usWordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.
Aug 7, 2026 5:56 AM
github.com
Show HN: Zroar – Serialized Roaring Bitmaps in Zighttps://github.com/manishrjain/zroarzroar is a ground-up implementation of Roaring Bitmaps data structure in Zig. zroar stores both the keys and (array, bitmap) containers in a single flat byte buffer, making the in-memory representation equal to the on-disk or over-the-network representation, eliminating the serialization/deserialization step entirely.The design was originally aimed at systems which keep their posting lists on disk, but zroar performs faster than CRoaring even for purely in-memory ops, due to CPU cache locality.Against CRoaring 5.0's benchmarking suite (ported to Zig), zroar is faster in 339 out of 360 tests, being 2x-9x faster (geometric mean), and up to 600x faster on serialize/deserialize.zroar avoids complex mechanism (like adaptive radix trees), uses Zig native SIMD ops and is simpler. The main logic is written in ~2000 lines of code, while CRoaring's 64-bit bitmap codebase is over 17000 LOC.Not yet: By choice, zroar doesn't support run containers, and is 64-bit only.There are more details in the G
Aug 21, 2026 8:18 PM
news.ycombinator.com
Windmill.dev is not "fully open-sourced (AGPLv3)"https://news.ycombinator.com/item?id=49392365I think Windmill.dev (https://github.com/windmill-labs/windmill) is really cool, and fully support their desire to be paid for their work.However, their README says:> “Windmill is fully open-sourced (AGPLv3)…”But their LICENSE says:> ... The files under backend/ are AGPLv3 Licensed, except any snippets of code under the compile flag ‘enterprise’. Those snippets and files are under a proprietary and commercial license. Private and public forks MUST not include the proprietary/commercial code mentioned above.I dove deeper into the code, there are around 300 files in the codebase that contain references to enterprise or private features, so it's not a clearly separated directory that can just be removed.They have 1.1k forks of their repository that I can see on Github, and I doubt all of them took the time to strip the proprietary code to comply with the license.So at this point, it feels like a licensing trap for anyone that clicks the fork button on Github or is attracted by the AGPL li
Aug 21, 2026 6:50 PM
traccia.ai
Show HN: Traccia - Observability, Runtime Control & Audit for agentshttps://traccia.ai/AI applications are becoming agents, which has started to take autonomous decisions. There are plenty of tools and platform available to trace, and observe what an agent or llms calls does. They are good in what they do, but tracing and observability isnt enough for AI agents era. We need a solution that can help you observe, evaluate, create run time policies to govern and finally audit the actions of the agent. We built Traccia to solve this problem. The good part, all of these can be achieved by just writing few lines of code. Traccia has an open-sourced sdk that can work with your existing observability tool like grafana, tempo, jaeger, etc. In case you need more than just observability, Traccia provides the platform to evaluate, control and audit the agents. The platform is easy to use. The product's documentation is quite extensive. It is also cloud vendor and framework agnostic. Traccia is being built by an Indian start up ,based out of Bengaluru. We are running a 3 months free
Aug 21, 2026 6:20 PM
poorleton.fit
Show HN: Poorleton – AI Generated Cycling Workoutshttps://poorleton.fitHello everyone, I recently got a used Peloton a couple of months ago for $200, but I didn't use it enough to justify $50/month for classes, so I vibe coded https://poorleton.fit/ over the weekend to have AI generated cycling classes.Let me know what you think.
Aug 21, 2026 6:19 PM
news.google.com
Modern Warfare 4 Open Beta: Everything You Need to Know - Call of Duty® | Best-Selling Video Game Franchisehttps://news.google.com/rss/articles/CBMiqwFBVV95cUxPLVIwa0QtTHMza0pkLXloREZHejA1RWxDTV94QTZ2TFdqWE5CWXZaXzZCMjlLa2Z0TnBZOS0xS2tfaGd5anZKWGVnenZVRVhid2ZjU3VpVUQ1YnQwVDY2TDI5VnZmS0xncTk0ZlNoQ29XOGg0Qzl5NGZFaHpzTzJMRU84ckc3aUtnTndZTndxVmZ1S3d2OHhfTGpva3lmbHhMN0FKcUR4bkhuSUk?oc=5Modern Warfare 4 Open Beta: Everything You Need to Know Call of Duty® | Best-Selling Video Game FranchiseCall of Duty: Modern Warfare 4 – New Multiplayer and Early Access Beta details PlayStation.BlogThe Big Call of Duty: Modern Warfare 4 Interview — Infinity Ward on the Beta, Matchmaking, and Much More IGNI might have been wrong about Call of Duty: Modern Warfare 4 Windows Central‘Modern Warfare 4’ Closed Beta Start-Time And How To Get Early Access Beta Codes ForbesNEXT and Modern Warfare 4: Early Intel, PC Specs, Pre-loading, and More Call of Duty® | Best-Selling Video Game FranchiseModern Warfare 4 Beta Patch Notes Call of Duty® | Best-Selling Video Game FranchiseNEXT and Modern Warfare 4 Early Access Beta: Weekend One Initial Intel Call of Duty® | Best-Selling Video Game FranchiseModern Warfare 4 Multiplayer: Movement, Gunplay, Modes, & Maps Call of Duty® | Best-Selling Video Game Franchise
Aug 21, 2026 6:02 PM
github.com
Show HN: Steganeur – Hide secret messages in LLM-generated text (Rust)https://github.com/marcsnid/steganeurHi HN! I made a project that I found really fun and I'm proud of the idea and implementation. This first came up when speaking to a friend, we were talking around how to do steganography in natural text, and realized an LLM's token choices are a natural channel.Steganeur accomplishes this by encoding a secret message into the token choices of a language model, producing cover text that reads like a normal sentence. A recipient recovers the message using only the cover text and the model. With the rejection method, the output is statistically identical to normal generation, not just something that looks similar.The interesting problem I hit: steganeur reads the model's logprobs directly, and three of the four methods need them to come out exactly the same on encode and decode. On GPU reductions are non-deterministic, so the logprobs drift between runs, which is enough to corrupt the bits. Only one method (block) survives on GPU, because it bins tokens by their id rather than by probabil
Aug 21, 2026 4:33 PM
news.ycombinator.com
Coding Agents killed my identity. How do you feel?https://news.ycombinator.com/item?id=49389408I always was a nerdy, deeply technical programmer. Contributing-to-open-source-and-reading-papers-in-my-spare-time type of programmer.Programming is like a game of chess for me: winning (i.e. delivering a product) is important, but only if I played this game myself. I don't enjoy winning if my opponent disconnected. I don't enjoy beating people who don't know how to move pieces. I don't enjoy winning with an engine, and coding agents are basically "winning with a chess engine".I started to use AI for coding a long time ago, when copilot was first introduced. At first, I was happy: "wow, this can write boring boilerplate and unit tests". Time went by, agents got better, time spent writing code myself went down. Half a year ago I suddenly realized I hadn't written any code for over a month, and I am a full-time software dev without any managing work. Not only did I stop writing code, but agents also became pretty good at proposing plans and architectures, and I was mostly providing missi
Aug 21, 2026 3:15 PM
github.com
Show HN: Diffview, a fast Git diff viewer written in Rusthttps://github.com/sleipner42/diffviewerEven with LLMs, I still like to review my code manually. However, I haven’t found a good visual diff viewer for this, so I wrote one myself in Rust.Its sole purpose is to help you quickly skim through diffs. If you organize your code into folders named domain, use-case, application, and infra, the app will show the domain code at the top, allowing you to easily see the most important changes first.
Aug 21, 2026 1:18 PM