PT-2026-104557

Dell's CSM advisory has two 10.0 flaws among 13. The "root on nodes" one is a 9.9 needing low privileges 2 of 13. Dell advisory DSA-2026-448 lists 37 CVEs: 13 in Dell's own code, two scored 10.0 and six scored 9.6 or more. Workarounds: "None". Fix: version 1.18.0 or later. The headline pairing,...

CVE-2026-104055

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: logstash, cass-config-builder-fips, mongodb-search, traccar, camunda-zeebe, gradle, commercial-elasticsearch, kates-fips, apache-nifi, automq, flyway-fips, akhq, apache-tomee, s3proxy-fips, knative-kafka-broker-fips, kafbat-ui, automq-fips, metabase,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: logstash, cass-config-builder-fips, mongodb-search, traccar, camunda-zeebe, gradle, commercial-elasticsearch, kates-fips, apache-nifi, automq, flyway-fips, akhq, apache-tomee, s3proxy-fips, knative-kafka-broker-fips, kafbat-ui, automq-fips, metabase,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: logstash, cass-config-builder-fips, mongodb-search, traccar, camunda-zeebe, gradle, commercial-elasticsearch, kates-fips, apache-nifi, automq, flyway-fips, akhq, apache-tomee, s3proxy-fips, knative-kafka-broker-fips, kafbat-ui, automq-fips, metabase,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: logstash, cass-config-builder-fips, mongodb-search, traccar, camunda-zeebe, gradle, commercial-elasticsearch, kates-fips, apache-nifi, automq, flyway-fips, akhq, apache-tomee, s3proxy-fips, knative-kafka-broker-fips, kafbat-ui, automq-fips, metabase,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, thingsboard, jenkins-plugin-manager, cassandra, strimzi-kafka-oauth, strimzi-kafka-operator, celeborn, spdx-tools-java, opensearch, logstash, neo4j, keycloak-config-cli, cass-config-builder, cassandra-reaper, akhq,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, thingsboard, jenkins-plugin-manager, cassandra, strimzi-kafka-oauth, strimzi-kafka-operator, celeborn, spdx-tools-java, opensearch, logstash, neo4j, keycloak-config-cli, cass-config-builder, cassandra-reaper, akhq,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, thingsboard, jenkins-plugin-manager, cassandra, strimzi-kafka-oauth, strimzi-kafka-operator, celeborn, spdx-tools-java, opensearch, logstash, neo4j, keycloak-config-cli, cass-config-builder, cassandra-reaper, akhq,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, thingsboard, jenkins-plugin-manager, cassandra, strimzi-kafka-oauth, strimzi-kafka-operator, celeborn, spdx-tools-java, opensearch, logstash, neo4j, keycloak-config-cli, cass-config-builder, cassandra-reaper, akhq,...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: hubble-ui, kubescape-operator, cilium, kubescape, hubble...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: opentofu, helm-push, rancher-helm, tigera-operator, xeol, helm-set-status, k8sgpt, k9s, kyverno-notation-aws, helm-mapkubeapis, kube-arangodb, manifest-tool, cluster-api-helm-controller, gitness, flux-helm-controller, kargo, maru, cert-manager-cmctl...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: opentofu, helm-push, rancher-helm, tigera-operator, xeol, helm-set-status, k8sgpt, k9s, kyverno-notation-aws, helm-mapkubeapis, kube-arangodb, manifest-tool, cluster-api-helm-controller, gitness, flux-helm-controller, kargo, maru, cert-manager-cmctl...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: helm-push, neuvector-scanner, tigera-operator, wolfictl, rancher, spegel, dagger, skaffold, headlamp, scorecard, steampipe, grype, zot, helm-set-status, k8sgpt, gatekeeper, trivy-operator, docker-cli-buildx, k9s, nerdctl, manifest-tool, k3s, kubevela, kargo,...

CVE-2026-104055

The postgresql-operator charm contains a vulnerability where the Prometheus postgres_exporter writes the monitoring user's password in cleartext to its logs during database connection errors. An attacker with log-reading permissions can recover this password to gain read-only pg_monitor access to...

EUVD-2026-91803

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

cdn-ip-scanner

CDN IP Scanner V2.0 Alta Precisión • Ultra Rápido • Impulsado por IA English • فارسی • Download • Donate 🇬🇧 English ¿Qué es CDN IP Scanner? CDN IP Scanner es una potente herramienta basada en web para escanear y encontrar las direcciones IP de CDN Red de Entrega de Contenido más rápidas. Ayuda a...

CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting

CVE-2026-21004 – Fuga de información de coincidencias SQLite FTS3 mediante manipulación de consultas Código del programa Python sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USING fts4content...

atomic-operator

license atomic-operator 此 Python 包用于在多种操作系统环境中执行 Atomic Red Team 测试（Atomics）。 新增内容？ 为什么？ atomic-operator 使安全专业人员能够针对 atomic-red-team 中定义的既定技术测试其检测和防御能力。通过使用 atomic-operator 这样的测试框架，您可以识别自己的防御能力以及防御覆盖范围的缺口。 此外，atomic-operator 还可用于许多其他场景，例如： 生成警报以测试产品 测试 EDR 和其他安全工具 从对手角度识别执行防御规避的方法 等等。 特性 支持在...