Exploit for CVE-2024-21546

UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-215...

RHSA-2026:62577 Red Hat Security Advisory: go-fdo-client security update

Bulletin has no description...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

httpd applies no timeout while receiving a request body, parking a worker on a stalled client

...

[SECURITY] Fedora 44 Update: syncthing-2.1.3-1.fc44

Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is...

[SECURITY] Fedora 43 Update: freerdp-3.31.0-1.fc43

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

SUSE CVE-2026-48932

A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers beyond maxHeadersCount /...

SUSE CVE-2026-84361

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

Linux Distros Unpatched Vulnerability : CVE-2026-84382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/decoders.py fully inflate each gzip,...

PT-2026-85374

Name of the Vulnerable Software and Affected Versions IXON VPN Client versions prior to 1.4.7 Description An improper CRLF Carriage Return Line Feed sequence neutralization flaw allows unauthenticated local attackers to execute commands with root or SYSTEM privileges. The issue exists in a...

PT-2026-85275

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client names to execute arbitrary commands as the uMemWatch process user through unquoted redirection targets in system calls...

Linux Distros Unpatched Vulnerability : CVE-2026-84379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.renderheaders in src/httpx2/httpx2/multipart.py directly interpolates...

Oracle Linux 10 : ELSA-2026-61241-0: / pipewire (ELSA-2026-612410)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-612410 advisory. 1.4.11-1.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 Tenable has extracted the preceding...

ALSA-2026:63128 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcildisc: Clear HCIUARTPROTOINIT on error CVE-2026-53073 kernel: exfat: fix potential use-after-free in exfatfinddirentry CVE-2026-63808 kernel: KEYS: fix overflow in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-105549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105549 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parsedfsreferrals validates that the response...

Fedora 44 : valkey (2026-f6cb88e85a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f6cb88e85a advisory. Valkey 9.0.6 - Released Tue 01 September 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible...

RockyLinux 10 : go-fdo-client (RLSA-2026:62577)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62577 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 encoding/asn1: golang: Go...

Oracle Linux 10 : ELSA-2026-62577-0: / go-fdo-client (ELSA-2026-625770)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-625770 advisory. 1.0.0-7 - Rebuild go-fdo-client against updated golang 1.0.0-6 - Rebuild go-fdo-client against updated golang 1.0.0-5 - Rebuild against updated gola...

PT-2026-85066

Name of the Vulnerable Software and Affected Versions Google Cloud KMS affected versions not specified Description An unauthorized user with key vault write access can trick an authorized client into making arbitrary authenticated Google Cloud KMS API calls using the authorized user's identity...

PT-2026-85074

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the...