CVE-2025-45407

CVE-2025-45407 CVE-2025-45407：DiscoveryNG v6.0.8 Hotfix 2 中的多个 XSS 漏洞。发现者：YallaSec 安全研究团队。CVE 编号：CVE-2025-45407。发布日期：2025 年 7 月...

CLEANSTART-2026-ZI25974 In Eclipse Jetty, the HTTP/1

Multiple security vulnerabilities affect the apache-zookeeper package. In Eclipse Jetty, the HTTP/1. See references for individual vulnerability details...

CLEANSTART-2026-GH96150 Netty (io

Multiple security vulnerabilities affect the apache-zookeeper package. Netty io. See references for individual vulnerability details...

CLEANSTART-2026-VJ90703 Security fixes for ghsa-72hv-8253-57qq, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r0, 3.9.4-r6

Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...

Fedora 44 : libevent (2026-72d10c874d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-72d10c874d advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

RockyLinux 8 : kernel-rt (RLSA-2026:64770)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64770 advisory. kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel:...

Adobe Experience Manager 6.5.0 < 6.5.3 / 2026.7.0 < 2026.8.0 Multiple Vulnerabilities (APSB26-98)

The version of Adobe Experience Manager installed on the remote host is prior to 2026.8.0, 6.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-98 advisory. - Critical XXE in Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1 and tika-parsers...

RHEL 8 : kernel (RHSA-2026:66000)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66000 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling...

Fedora 44 : tar (2026-044e56d9ff)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-044e56d9ff advisory. Fix build with libacl 2.4.0, fix CVE-2026-5704, CVE-2026-18508, CVE-2026-18477, and a regression in the fix for CVE-2025-45582. Tenable has extracte...

RockyLinux 10 : image-builder (RLSA-2026:65534)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65534 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/x509: golang: Go crypto/x509:...

CVE-2026-87060

A flaw was found in olm-operator-konflux-sample. The system's automated merging of updates, known as Renovate automerge, is configured too broadly, allowing a wide range of updates without sufficient scrutiny. Additionally, the critical base image for the catalog, ose-operator-registry, is entire...

GHSA-826X-QG76-XQJX vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-CJ75-R57J-R5V8 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

Important: Red Hat Security Advisory: image-builder security update

An update for image-builder is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

gardyn

摘要 2025年2月，我对一台 Gardyn Home 4.0 设备进行了安全研究。在研究过程中，我发现了多个漏洞及糟糕的安全实践。利用这些漏洞，攻击者可能能够获得 Gardyn 设备的系统级访问权限，并以此对其所连接的局域网发起进一步攻击。攻击者还可能利用此访问权限影响设备的正常运行，包括损坏设备中种植的植物以及设备本身。 本仓库包含 Gardyn 水培花园一系列漏洞的技术细节和状态。发布这些信息的目的是告知消费者 Gardyn 产品中尚未解决的安全问题。 披露时间线 2025-02-21 - 首次尝试联系供应商。 2025-02-26 - 与供应商销售团队取得联系。 2025-04-...

Vulnerabilities present in Siemens products

Siemens has identified vulnerabilities in various products such as Desigo, Reyrolle, SIMATIC, SCALANCE, SINAMICS, and Siveillance. These vulnerabilities allow malicious actors to carry out attacks that can cause the following types of damage: Denial-of-Service DoS attacks Data manipulation Evasio...

Citrix Workspace app for Windows Security Bulletin CVE-2026-78546 and CVE-2026-78547

Severity - Medium Description of Problem Two vulnerabilities have been discovered that impact the Citrix Workspace app for Windows. Affected Versions The vulnerabilities affect the following supported versions of the Citrix Workspace app for Windows. Current Release CR Citrix Workspace app for...

openclaw_vulnerabilities_and_solutions

OpenClaw — 漏洞、加固与 VPS 部署 关于在 VPS 上安全部署 OpenClaw 的已脱敏公开文档：访问架构、已知漏洞以及带解决方案的实际事故案例。 来自真实 OpenClaw 运维的公开脱敏文档：如何在不暴露网关的情况下将平台部署到 VPS，哪些 CVE/问题在实践中真正重要，以及生产环境中出现了哪些故障（附修复方案）。 当前版本 / Current version: v1.2 · 更新日志 · GitHub Releases 这是什么 / What this repository is...

CVE-2023-37569

creationtimestamp| type| source ---|---|--- 2026-09-08 10:00:05+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-07 2026-09-08 11:00:33+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80d75a83-4aac-4637-aae0-5a1fce957eb8 2026-09-09...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...