Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011226)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011226 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix PCI device refcount leak in amdgpuatrmgetbios As comment of pcigetclass says, it...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013262 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak For some sev ioctl...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006926 advisory. In the Linux kernel, the following vulnerability has been resolved: coresight: cti: Fix hang in ctidisablehw ctienablehw and ctidisablehw are called from an atomic...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: python3 (UTSA-2026-013020)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013020 advisory. Allows modifying some file metadata e.g. last modified with filter=dataor file permissions chmod with filter=tarof files outside the extraction directory. You are...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011178)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011178 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeonatrmgetbios As comment of pcigetclass says, it...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010946)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010946 advisory. In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Fix divide error in ndlabeldatainit If a faulty CXL memory device returns a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006944)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006944 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeonatrmgetbios As comment of pcigetclass says, it...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013082 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - avoid null pointer deref in mpicmpui During NVMeTCP Authentication a controller...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011407)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011407 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-006890)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006890 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device...

Directory Traversal

Overview openmage/magento-lts is a This repository is the home of an unofficial community-driven project. Affected versions of this package are vulnerable to Directory Traversal through the files request parameter in the dataflow import parsers. An attacker with administrative privileges can read...

PT-2026-33797

The Dataflow module in OpenMage LTS uses a weak blacklist filter str replace'../', '', $input to prevent path traversal attacks. This filter can be bypassed using patterns like ..././ or ....//, which after the replacement still result in ../. An authenticated administrator can exploit this to re...

Debian dla-4533 : libnss-myhostname - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4533 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4533-1 [email protected]...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-39979)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-39979 advisory. - jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5...

MiracleLinux 8 : nodejs:24 (AXSA:2026-465:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-465:01 advisory. nodejs: Nodejs denial of service CVE-2026-21637 minimatch: minimatch: Denial of Service via specially crafted glob patterns CVE-2026-26996 undici:...

Exploit for CVE-2025-15403

CVE-2025-15403 RegistrationMagic = 6.0.7.1 - Unauthenticat...

Exploit for CVE-2026-0920

CVE-2026-0920- LA-Studio Element Kit for Elementor = 1.5.6...

Giskard Has A Regular Expression Denial Of Service (ReDoS) In RegexMatching Check

Summary The RegexMatching check in the "giskard-checks" package passes a user-supplied regular expression pattern directly to Python's re.search without any timeout, complexity guard, or pattern validation. An attacker who can control the regex pattern or the text being matched can craft inputs...

Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability

ZDI-CAN-29412: FlowiseAI Flowise AirtableAgent Code Injection Remote Code Execution Vulnerability Trend Micro's Zero Day Initiative has identified a vulnerability affecting the following products: Flowise - Flowise -- VULNERABILITY DETAILS ------------------------ Version tested: 3.0.13 Installer...

GHSA-V38X-C887-992F Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability

ZDI-CAN-29412: FlowiseAI Flowise AirtableAgent Code Injection Remote Code Execution Vulnerability Trend Micro's Zero Day Initiative has identified a vulnerability affecting the following products: Flowise - Flowise -- VULNERABILITY DETAILS ------------------------ Version tested: 3.0.13 Installer...