Cisco Identity Services Engine Authentication Bypass

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device are related to deficiencies in the authentication process. Exploiting this vulnerability could allow a maliciou...

Cisco ISE Policy Management Platform Path Traversal

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to an incorrect limit on the path name to the directory. Exploiting this vulnerability could allow a...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27216)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the V8 engine that allows objects to be reclaimed and then reused after their release. Attackers can...

Google Chrome Input Validation Vulnerability (CNVD-2026-26945)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a vulnerability in Google Chrome’s input validation mechanism. The vulnerability stems from memory processing defects in the V8 engine. Attackers can exploit this vulnerability by constructing HTML...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27214)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the V8 engine, where objects continue to be used after being released. Attackers can exploit this...

CVE-2026-14738 exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hash

A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function imagecachekey of the file src/exo/worker/engines/mlx/vision.py of the component Vision Feature Cache. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high...

CVE-2026-14738

Technical details are not publicly available in the provided documents; monitor for updates.

[SECURITY] Fedora 43 Update: podman-5.8.3-1.fc43

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

Beijing StarNet Jet Networks Technology Co., Ltd.'s ASME access shared management engine has a command execution vulnerability.

ASME Access Shared Management Engine is a proxy prevention product based on DPI application layer detection. Beijing Starnet Netcom Technology Co., Ltd.'s ASME Access Shared Management Engine has a command execution vulnerability, allowing attackers to execute arbitrary commands using this...

PT-2026-114709

Уязвимость обработчика JavaScript-сценариев V8 веб-браузеров Google Chrome и Microsoft Edge связана с ошибками преобразования типов защищаемой информации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью специально созданной...

Exploit for Insecure Default Initialization of Resource in Apache Solr

Mass Reconnaissance & Exploitation Framework for Apache Solr...

Chromium: CVE-2026-13780 Insufficient validation of untrusted input in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13967 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Docker Engine < 29.5.1 Arbitrary Code Execution

The version of the Docker Engine Moby installed on the remote host is prior to 29.5.1. It is, therefore, affected by an arbitrary code execution vulnerability: - When a compressed archive is uploaded to a container via PUT /containers/id/archive or piped through docker cp -, the daemon resolves...

Ubuntu 24.04 LTS / 25.10 : Linux kernel vulnerabilities (USN-8490-1)

"The remote Ubuntu 24.04 LTS / 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8490-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects...

Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8491-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8491-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

Security Bulletin: Parameter Injection Vulnerability in API Graph Execution Engine

Summary A parameter injection vulnerability existed in the API Graph Execution Engine's tweaks processing mechanism. The vulnerability allowed authenticated attackers to bypass security controls and inject malicious parameters into flow components at runtime. An attacker with valid API credential...

USN-8498-1 linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; -...

USN-8492-2 linux-aws-6.8, linux-gcp-6.8, linux-gke, linux-gkeop, linux-ibm-6.8, linux-nvidia-lowlatency, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; -...

USN-8492-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; -...